last executing test programs: 5m59.549131063s ago: executing program 0 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="9500000000000000080000000100000006020500f7ffffff6db33000fcffffffc104200000000000"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xb7, &(0x7f0000000580)=""/183, 0x41100, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x27c7, 0xe, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x3, 0xe, 0x9}, {0x1, 0x3, 0x4, 0xc}, {0x4, 0x5, 0x6, 0x6}, {0x0, 0x5, 0x3, 0xa}, {0x3, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x10, 0xd}], 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xffffffffffffff86, 0x0, 0x0, 0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x5}, @IPSET_ATTR_DATA, @IPSET_ATTR_REVISION, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) listen(r11, 0x7) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x79e}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7d7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40854) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r13, 0x0, 0x0, 0x800) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}}}, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x9}, &(0x7f00000001c0)=0x9c) 5m59.309813212s ago: executing program 0 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x8, 0xfffffff9, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xf, 0x7}, {0xffff, 0xfff2}}}, 0x24}}, 0x2000c0d1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000002c0)=0x2000041) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ff17ee384cd15003", "62c675738bbfcaaddd8501085f1736fa", "65d2ce0f", "2d24b672696cb8aa"}, 0x28) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x4800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) r6 = socket(0x11, 0x800000003, 0x0) bind$packet(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x13, 0xa, 0x50000, 0x6}}) 5m58.985262974s ago: executing program 0 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m58.688226797s ago: executing program 0 (id=419): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="030200000000bbbbbbbbbbbb08004500001501000000000101ac141400030190781200183f2500000000640000003200007f0000017f00000100186371ae9b1c030000000000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}}, 0x4000040) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0xc0}}, 0x0, 0x7}, 0x90) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00e239e4b6010000000000fcffffff0e0000000800060009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x174, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xc}, {0x0, 0x9}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf7, 0xcf39, 0x9, 0x0, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x51dd, 0x2, 0x7, 0x2, 0x2]}}, {{0x1c, 0x1, {0xe9, 0x81, 0x7f, 0xa, 0x97b991842ced05b8, 0x63c99e89, 0x55, 0x7}}, {0x12, 0x2, [0x7, 0x71, 0x1, 0xa, 0x180, 0x0, 0x2000]}}, {{0x1c, 0x1, {0x9, 0x5, 0x6, 0xa, 0x1, 0x8000, 0x0, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0xff, 0x1, 0x59a1, 0x6, 0x1, 0x4, 0x8001, 0x5}}, {0xe, 0x2, [0x8, 0x7, 0x4, 0x6996, 0x3]}}, {{0x1c, 0x1, {0x4, 0x8, 0x6, 0xa, 0x1, 0x6, 0x4, 0x8}}, {0x14, 0x2, [0x9, 0x7ff, 0x1, 0xfff8, 0xf, 0xf, 0x6, 0x1]}}, {{0x1c, 0x1, {0x3, 0x80, 0x9cb, 0x2, 0x2, 0x3, 0x4, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x2]}}, {{0x1c, 0x1, {0x5, 0x1, 0x7, 0x0, 0x0, 0xaa, 0x80000, 0x1}}, {0x6, 0x2, [0xc20c]}}, {{0x1c, 0x1, {0x71, 0x36, 0x29, 0x80000000, 0x2, 0x2, 0x6ad, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x174}}, 0x20004015) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r0}) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) (async) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r4], 0x108}}], 0x1, 0xc040) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 5m58.384648925s ago: executing program 0 (id=421): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x304, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7a}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x9}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d9af2ed1726d1c56ca9025c2ee17d685"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "81e7c040a203db8ad0058eb677cff604c5f14a234c4762d79f7caf3f02e07a64"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "34f2af67b7fa59f677668ded792658019202dfb88cfe737be605f9a096311387"}]}, @NL802154_ATTR_SEC_KEY={0x1e8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bfd26d5343f6ef992cae897c725801284fbf3ea380372d98fbe4f021cfe235aa"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x36}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4c50}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8450b68ea16f74bab02db451069b8c1160292c36fc15167fa83fe87d2d341b2b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8cb69b6933a101a56bcb41f127597cd1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "965251ce988cbdb19a083a3318a0dc6a"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xea7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xec00}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370429bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83040500000000112800128009000100766c616e00000000180002800c00020069b8cdf79f76"], 0x48}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x6) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000002c0)={{r7, &(0x7f0000000080)='GPL\x00', 0x40, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0x9]}, {0x2, 0x6, 0x9}}, 0x80000000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x7}, {[0x2, 0x3ff, 0xec87, 0x3]}, 0x2, 0xa1, &(0x7f00000003c0)=""/161}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in6=@private2}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000040)=0x3a, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000500)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) bind$tipc(r2, 0x0, 0x0) 5m58.197191516s ago: executing program 0 (id=423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f00000012c0)={{0x5, 0x4, 0x66be, 0x10, 0x528}, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="0800150001000400050019"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@call={0x85, 0x0, 0x0, 0xec}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xe, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="dd3a36d346ae6bb089a44453a7e968591a6192afe22197efe534db", @ANYRES16=r11, @ANYBLOB="000228bd7000fddbdf25660000000c00990001000000420000000400b800"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 5m43.142859393s ago: executing program 32 (id=423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f00000012c0)={{0x5, 0x4, 0x66be, 0x10, 0x528}, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="0800150001000400050019"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@call={0x85, 0x0, 0x0, 0xec}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xe, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="dd3a36d346ae6bb089a44453a7e968591a6192afe22197efe534db", @ANYRES16=r11, @ANYBLOB="000228bd7000fddbdf25660000000c00990001000000420000000400b800"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 1m24.392051156s ago: executing program 3 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x5}, 0x50) 1m24.268015833s ago: executing program 3 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x300, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x4b9b6000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80000004, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) 1m24.181844807s ago: executing program 3 (id=2799): r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x6020480) r1 = socket(0x23, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040001000000000044b80000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1000000000000000000000000700000010000000000000000000feff06000000"], 0x20}}], 0x1, 0x20000890) 1m23.97776867s ago: executing program 3 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000f0000000000a78df50a4d77a52a79c73b52309d77824c330a86a863cde70da896584a1b5772c3a6f9bc34af117b085cdf711c52a209fa1e1ead13a6f9c3cd5317fa631f4c73f98fe0344a1067e79abf209f2cae1ed5f2cf28f91d3e2c1a95255b73c7b45a67869cf31b00c975f92cf049aec645e459567d755db56e0c4b6968497bf5720e8eb3883991c027b5288e00f55c77458ca904ba97a81486b018e0d0077660cc0304be91e7013672bb007a2ba7dc48156a3a7a873907252059099d64945618c97fc1adbb9d6a052d2d1ba058dd6ac16e496e9daf6c510fddaf41ccd9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) readv(r1, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r5}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) r6 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x8, 0x8, 0x6, 0x2, 0x101, 0x14b5, 0x80, [0x95, 0x2]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x8, 0x8, 0x6, 0x2, 0x101, 0x14b5, 0x80, [0x95, 0x2]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x3c}, {&(0x7f0000002940)=""/144, 0x90}], 0x2}}], 0x1, 0x10002, 0x0) (async) recvmmsg(r7, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x3c}, {&(0x7f0000002940)=""/144, 0x90}], 0x2}}], 0x1, 0x10002, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb58b, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x2004c080) (async) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb58b, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x2004c080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) 1m23.616983392s ago: executing program 3 (id=2805): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5}}], 0x1, 0x40010122, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x84}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x59}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x78}}, 0x4000000) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x1, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup(r5, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="320000001400000000000000", @ANYRES32=r9, @ANYBLOB="4d2a9effc01b10880635d594427a", @ANYRES64=r7], 0x20) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="9b28eb7ec96ef805", 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, r3, 0x30, 0x4004, 0x0, @void, @value, @void, @void, r7}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={r11, 0x5}, &(0x7f00000005c0)=0x8) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272696467650000280002800c0023000200eb5e9f28a66a5788aaaeea71cea5bae80000000000050024000000000005002a0001000000ffd4c82579aa7ac7c9cad3dd21c90c4ff23f9358e89e0ccb045303e336ce195ba0e9559b191dace6788c12e021a1ec140696"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="00840000000004000c001a8004000480040005"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) 1m23.014274194s ago: executing program 3 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x120, 0x120, 0x448, 0x230, 0x448, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7ff, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @DNPT={0x0, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@local, 0x36, 0xb, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x65a) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000cafe47efc787fc97a842d04c2ac4d6961d487f7f5fc72cdf7c7bc6025b5c0d475dd6e05eaf9c7e43635a7c6d6bffd039d24d40a0de5fc07566e2900ee0459d43128067a8eccd9019e5244a9fa41046909c0f3ba4c9669dfa30f5764063e17cd96d9a3a325b9a94e5ac8482fbdc9d3ea255a78d883186a66ff4659117c9ea7cd88961de74687b878419d4a1352f0663fe2a503257e13e1c0760b6219f", @ANYRES16=r2, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e0000000000000000000800028004000380"], 0x34}}, 0x4000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c000480080001400000000508000640000000015700020014000180080001000000000008000200ac14143a06000340000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000bb0c000280050001002f0000000c000280", @ANYRESDEC=r5], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000a00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641101fe8004000000000000000000000000bbfe8000000000000000000000000000aa4e200e22009078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r6, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYRESDEC=r12, @ANYRES32=r16, @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r13, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800001f", @ANYRES16=r15, @ANYBLOB="00012dbd7000fbdbdf256400000008000300", @ANYRES32=r11, @ANYRES16=r9], 0xfffffffffffffe51}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0) 1m7.927403057s ago: executing program 33 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x120, 0x120, 0x448, 0x230, 0x448, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7ff, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @DNPT={0x0, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@local, 0x36, 0xb, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x65a) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000cafe47efc787fc97a842d04c2ac4d6961d487f7f5fc72cdf7c7bc6025b5c0d475dd6e05eaf9c7e43635a7c6d6bffd039d24d40a0de5fc07566e2900ee0459d43128067a8eccd9019e5244a9fa41046909c0f3ba4c9669dfa30f5764063e17cd96d9a3a325b9a94e5ac8482fbdc9d3ea255a78d883186a66ff4659117c9ea7cd88961de74687b878419d4a1352f0663fe2a503257e13e1c0760b6219f", @ANYRES16=r2, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e0000000000000000000800028004000380"], 0x34}}, 0x4000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c000480080001400000000508000640000000015700020014000180080001000000000008000200ac14143a06000340000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000bb0c000280050001002f0000000c000280", @ANYRESDEC=r5], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000a00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641101fe8004000000000000000000000000bbfe8000000000000000000000000000aa4e200e22009078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5c3f1b82e835da28a31c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000002024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a00000014000200000000000000000000000000000000010500030000000000a0000080060001000a0000001400020000000000000000000000000000000000050003000100000028000080060001000a00000014000200fe880000000000000000000000000001050003000300000028000080060001000a00000014000200fc020000000000000000000000000000050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b30000080080003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYRESDEC=r12, @ANYRES32=r16, @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r13, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800001f", @ANYRES16=r15, @ANYBLOB="00012dbd7000fbdbdf256400000008000300", @ANYRES32=r11, @ANYRES16=r9], 0xfffffffffffffe51}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0) 2.801053219s ago: executing program 2 (id=3394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0x400000000000000}, 0x84) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 2.694008494s ago: executing program 2 (id=3395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005b80)=@upd={0xe8, 0x12, 0x1, 0x70bd2c, 0x25dfdbfd, {{'drbg_pr_hmac_sha512\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0xfffffff9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, &(0x7f0000000240)=""/190, 0xbe, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000180)=0x200802, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.402279387s ago: executing program 2 (id=3401): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000001d00)='/\'', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1200000001000000040000000800000022040100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/24, @ANYRES32, @ANYBLOB="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"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x20, &(0x7f0000002dc0)=ANY=[@ANYBLOB="185100000f0000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000623000085000000060000001855000006000000000000000000000018130000", @ANYRES32=r6, @ANYBLOB="000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00000085000000a500000000000000000000000000000000fbd01bbf88f506a604217d03271801ed8b77b890d4916c104db009764f2f6f5d13163e878917e742872a9c1c13e72bbc81a0e31448edaf042a54f798f8c2a317d4095e09950807f91077d2b909bc8ef7ffffffffffffffe6e836c12cd0ed920697460651e8ae0f33bfd2f7058853a00646b9494b42a2bee8530363bf12921783e664"], &(0x7f0000000480)='syzkaller\x00', 0x7fff, 0x57, &(0x7f00000004c0)=""/87, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xf, 0x81, 0x10001}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r6, r6, r6, r6, 0x1, r6], &(0x7f0000000600)=[{0x2, 0x2, 0x1ff, 0x5}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x1, 0xd}, {0x4, 0x4, 0xe, 0x6}, {0x4, 0x2, 0x9, 0x7}], 0x10, 0x4}, 0x94) pwritev(r6, &(0x7f0000002b00)=[{&(0x7f0000000200)="638bb652a527d103619e732fae477df2e5aee58284233b22a3d3e6793c670b61bea68e9b350a112481ff2ac00c31f902", 0x30}, {&(0x7f0000000280)="90565ab2bf370e7a747c47b7e8881f74bd3fbfdf7fe45fe4c4916d1b3ea5a9eaee954fdabdbb4e543440763beb7c397ab69af9524b884544", 0x38}, {&(0x7f0000000740)="2a6b3058299d1664ece6deddd75f5776207c0df11eade8d3009e38d880853a688f8ce83b04", 0x25}, {&(0x7f0000000780)="e083782d36584a78fe37eb8d24501edd40540e6f9d1f3839889e9abbf68969f10f4fd0247e0660373ff111d4f6a54806d389ada68224e7d524d8569cf55edca2120ac16f6f83e8a8ba00ba1f2049e5cc18e133fe70eece1133453474a44d4a98e627ee7d59eabb44115df55b58aeb90aa00b30545d0bf2675bec479b4be341979550dcafe18e6b15abfc69b082e2513e13ff50d6ea2d9e2ac229d45b4fa77255c24630fb1ee361cefb18263841701f18e25545d9b658264394f37c4d35425f28c053d3138239998d32a789a3441246aa6ac514ae7e62a786ee43a0a5cca008dc", 0xe0}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="1e3b143b3fef84faaec33831035b176d962099066a", 0x15}, {&(0x7f0000002940)="dcb4217b4b066ddd4e80ae21ddcd6b41ecf2835d8db56e23370c8e4573314e32ca5d61ece6b33682c4baafbaee2c6784c0562484b34b4f0f4f9615b07ac2157a8e120c1e49800f72e09531a8c4871d4d5d2298107c998a2e761cf4d3014466fc58ffcaf9616a5c0cb6966e99d6f1c0d398614c44e9aa64dfeba62887903067494d041a076d0bb01b190d64ebcab9d42b9598862f4786c56d7b114972203c", 0x9e}, {&(0x7f0000002a00)="fc74d652aa3312bd64f24fa8aa0032b6e5614c3c243fcd943fe11d22eb83e5bf773c1705c5d31a3cfc4bb5d30c04f23f48ef8da59ac10a2cdcc979bbc369f8121344d93dd55b78f68f6dfe4229f414cddb173c7e0517d1aeb1c0c52bf9ffe89083d870106b09734acf84f33261bb3864e4434726c0aa3918fe97799f25a0fc70666f993a2a042bd7cc0f01ae8d9fa65c2018e8f7fbb8f92c3fcb311178f57c59aa1c112cd76decdfd6819368738e3707bb076697913cffbf8184bc346ac1850e24c9e7491945d01e1029", 0xca}], 0x9, 0x9, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.290697354s ago: executing program 2 (id=3403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000003, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000180)=[{r6}, {r3, 0x4}, {r5, 0x1c}], 0x3, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x4}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000002000000229bd7000ffdbdf25028020f4090000002c00000008000200640101010c000c400000e2ff000000060c000c4000000000000000030c000c400000000000000000080006000000000008000100ac1414bb22a9b08b3555057ab3e4d44ecb4d1716ed58013dbcd1fbe6a94b66e0045e06821c6154372f7e253a243ff09a8592b2a7"], 0x58}}, 0x8000) 2.286650278s ago: executing program 5 (id=3404): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x5) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0xfa, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbb45adbde0800440000ec0000000000019078ac1e0001ac1414aa940401008674ffffffff070ca2f692dc00087e6558740010148a6f070b76d65751ed8c5e9c94000f5a7c99e16ef2b645d1595ecba7020c14898049de4fc98b9b5e0009a9221c031453374a044db1000f402fd4897e723e469b2a641a590012f1e5d211f4d49103048b1954d83f77da0709e4783c0abd43ac4404ed2305009078e00000e0450000000000000000110000e00000010000e9a56ef5000083030000443c00030a010101000000000000000000000000ac14140000000000ac1414bb000000000000000000000000ac141400"/250], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="ebff07007300000008008100", @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="680013003529e3c993c533b51f334f321c6258252ee71246b329def73fc9b043b4f7c3bdc9cd2ffe9de361c09bbc50ff", @ANYRES16=0x0, @ANYBLOB="10012abd7000fddbdf25010000002c0006800600010002000000060005004e22000008000700", @ANYRES32=r8, @ANYBLOB="0600010002000000060005004e20000005000500010000002000068014000400fc020000000000000000000000000001060001000a000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000400)={r1, r1, 0x6, 0x0, 0x0, 0x9, 0x5, 0xc49, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r12, 0x40047452, &(0x7f0000000200)=0x9) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000140)="41000200010001", 0x7) 2.187048751s ago: executing program 1 (id=3405): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x6b, 0x78, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) 2.119524125s ago: executing program 6 (id=3406): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fa000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x10}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002480)=@newtfilter={0x30, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) unshare(0x24060400) syz_emit_ethernet(0xbe, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600fe10400883afffe8000000000000000000000000000aaf7020000000000000000000000000001870090780000000000000000000000000000000004005168010e78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b10371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286f"], 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x5f]}}, &(0x7f00000003c0)=""/226, 0x1c, 0xe2, 0x1, 0x9}, 0x28) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="8b9869fc16c649eac4510e4a0851b8c2e2b96bb58e4913730ec29cc6cf1d93c5532ab12512f1a7839407fffdfcd22ed568170aba74bc2b84fd59188c5fd9d5e8ef59a187e75a7591f3ce727c3b96025f40c3c8e226af2075cd48ccec454247ec77690dc27d3aa687bc79183ed06b42c9a29f9f2b926b7b15860b81c3fc79fd", @ANYBLOB="000000007000fbdbdf0c0300000105001200040000009cd6c52d7e738da47563d08079690d0ca4f1"], 0x1c}, 0x1, 0x0, 0x0, 0x24048005}, 0x0) 1.943664903s ago: executing program 1 (id=3407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.808308094s ago: executing program 5 (id=3408): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000100)=""/183}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.79354525s ago: executing program 4 (id=3409): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000440)={{}, [@bcast, @null, @bcast, @null, @null, @null, @default, @default]}, &(0x7f00000004c0)=0x48, 0x80000) sendto$ax25(r0, &(0x7f00000006c0)="6cb366593d375b03a9e61a6e41f248c6f1e1393d6ad82e805b35f3506cdf03f40eefd7c5a3e4b86f7bf0a7353bccd390a6d56420b9aa8674ea6a19f241e0ae3ad14ac96e170fb870689a2e0b69ff3ab488d1f1d1abfa2a7d6888ee57755c804123fa3032c10f3dffc0df2ff71bbf93767a87522b888f42acfd", 0x79, 0x4000000, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) ioctl$NILFS_IOCTL_RESIZE(r6, 0x40086e8b, &(0x7f0000000000)=0x8001) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup(r11, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@deltaction={0xf0, 0x31, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4048080}, 0x4004) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r7], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.699909815s ago: executing program 1 (id=3410): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000580)={0x22, 0x7, 0xf2, 0x10, 0xad}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f00000001c0)="c7212f4c8766ee0f29f29e4121417b7b27a3c9b67f304d359234eafe285f1afc68fc3c02ff6d08ffdb10f21a1f2a24fb8d5b558f35e2345c41671e3f14e34b810cf96ec6aa3c363c88d4335708cf0ff21942c0ba8f1d12cbf6c4bb404e5fba2948ba7d57749622578b9298afb3e13d734e9069fd01815999bc7b439486b738ef15d5c33f60d4a1134e1cd4906ce9721a2c0732bc41b92a1b9ab009d251ab82405342d82cd20834ce48d4731ea6f5e85aa068cf565bc71f8d3a59d093f4245b9b94a27d25e27cc7525766dcbcb02a71b80ba1403aec3a2a1e552eb12569", &(0x7f00000002c0)=""/172, &(0x7f0000000380)="867655d20ead627e853b35af40f5b8fe2c9487214eeaf825f445ea7c235ab0c1c69685f5462a806fc2c10692022a5efbca48797584792200c9333bbec40f25a448a384d044fe2e77faa6cd1ca51c984043", &(0x7f0000000400)="e21ae460976208977dab5c3279955c73b671ddedb294538a24a827b5ea3b5885af86105d24faf141e7a031fd59aa4320fbedeead7cd905c902df76b12eb15c7b3d5e242fc7febfb341debeef0d4fea0b024666a93890ceaa58afb9fce4073440c17d96c70013bc35fbb33cd53db39b28dd12bf5bd337ad15133bcb42d988c9eb3d577232c9746a39c1e0ef48a63e7433eef1c5a17081cf3d0ae191b91c86a678460542f696428bf7ab39ed3992011654e9760619bb324b52d125c75810729a61b231385f55b147b74e8d0848dab80e8c5b57a052368b2036abe3450ba2a5196463", 0x9, r1, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, 0x0, &(0x7f0000000880)=r2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x48807}, 0x80048c0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x17, 0x4, 0x9, 0x8, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x3, 0xfffffffe, 0x1, 0x7, 0x1}, @sadb_sa={0x2, 0x1, 0x4d3, 0xd3, 0xf8, 0x62, 0x1, 0x40000000}]}, 0x40}}, 0x800) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8993, &(0x7f0000000040)={'vlan0\x00', @ifru_flags=0x800}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x1, 0x0) vmsplice(r11, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}, {&(0x7f0000000980)="ba", 0x1}, {&(0x7f00000009c0)='6', 0x1}, {&(0x7f0000002a40)="e3", 0x1}, {&(0x7f0000000b80)="81", 0x1}], 0x8, 0x6) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, 0x0) write(r8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.698928554s ago: executing program 6 (id=3411): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x4, @void}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000700)={{r0, &(0x7f0000000580)='u32\x00', 0x505841, &(0x7f00000005c0)={@_ha_fsid={[0xb, 0x4]}, {0x3, 0xf721, 0x8, 0x1}}, 0x9, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0xb9d}, {[0x5, 0x0, 0x7aafdb75, 0x4]}, 0x120, 0x35, &(0x7f00000006c0)=""/53}) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000500)={0xffffffffffffffff}) (rerun: 32) splice(r8, 0x0, r7, 0x0, 0xffffffbfffff8000, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1e, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000068f7000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18490000f8ffffff000000000000000018290000", @ANYRES32=0x1, @ANYBLOB="00000000db050000186a000001000000000000009407000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b57480001000000018570000090000000000000000000000bf91000000000000b7b6a4186b0000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x47, &(0x7f0000000500)=""/71, 0x40f00, 0x46, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x7, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r8], &(0x7f0000000840)=[{0x0, 0x1, 0x8, 0x3}, {0x2, 0x5, 0x5, 0xa}, {0x5, 0x4, 0x9, 0x2}, {0x2, 0x1, 0xd}, {0x3, 0x5, 0x1, 0x7}], 0x10, 0x100}, 0x94) (async, rerun: 64) r9 = socket(0x10, 0x803, 0x0) (rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r13 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xfff3}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x6c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x4206, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x2f}}]}}]}, 0x6c}}, 0x24040084) 1.597367427s ago: executing program 5 (id=3412): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x9}}, 0x3, 0xffff, 0x4, 0x3, 0x8, 0x0, 0xa}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x1, 0x1, 0x6, 0x12, 0x2, 0x4}, &(0x7f0000000180)=0x9c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000200)='\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x686, 0x1a3]}, {0x8, 0x8, 0x80000000, 0x200}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}, {[0xdd, 0x80, 0x3, 0x511e]}, 0xd5d, 0x10, &(0x7f0000000300)=""/16}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000003c0)=""/69, &(0x7f0000000440)=0x45) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000480)={0x41, 0x0, 0x47deeca2c2f37a1c}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x41}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x390, 0x0, 0x20, 0x70bd2b, 0x7, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x4}}}}, [@NL80211_ATTR_BEACON_TAIL={0x1b6, 0xf, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0x1, 0x2, 0x0, 0x48, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6}}, @fast_bss_trans={0x37, 0xdf, {0x57, 0x6, "8754605294bb39b56900e3f295591584", "2978fa6ff91260bcccf1b3b28a8763b242f4ae9937c819c44d08d560606d6688", "b3cb7ac5108b245fe2d8426505cd2f25e67406f7e51c4c88fee38786a134719c", [{0x4, 0x1f, "bcf3408509abe60f9afa8bff8f05dd98815e221abb5ffd7282063ae7ebf225"}, {0x3, 0x28, "f63d7c50bfce46375e35a4b7a78b6d1b208c3d7d76f77c0a0656f5baa0a696f6ac57719863c29948"}, {0x2, 0x7, "ba4ce31d9d2543"}, {0x4, 0xe, "b491e4906e31dd7d9e4b1680f67b"}, {0x3, 0x1a, "09412f5fc5c19ee7ac1083879377d1f6293eea06d3c104911941"}, {0x4, 0xb, "010dbf10ccb0eb043f6f8c"}]}}, @random_vendor={0xdd, 0x6c, "6c2cf9119944fb79e2f72132cbb3258fc985d32be2ce66228af0ff9b87460c732c6f613923dcf58e4bf02a3c764a193f9ece157a9a197e117ea50947404adb9a094815c5008b3e69ad5242f1201c7146c85ab2644a2526e22c85936ec57813b6c99bee8a7aa17dac8437b376"}, @cf={0x4, 0x6, {0x8, 0x5, 0x0, 0x9}}, @cf={0x4, 0x6, {0x7, 0x2, 0x6, 0x3}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x2}}, @measure_req={0x26, 0x19, {0x3, 0xfb, 0x20, "1c498895287df7f7f436d915038ce7f501849c254fbe"}}]}, @NL80211_ATTR_IE={0x1af, 0x2a, [@mic={0x8c, 0x10, {0x97a, "a867a6599b09", @short="396e39d384dcd39d"}}, @ibss={0x6, 0x2, 0xd5}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @fast_bss_trans={0x37, 0x83, {0x80, 0x2, "adc2915df22bf2baa530691daf772219", "92ef747086cd393ebfa71968f969da8dec2be7dc49a294f29726fd5c00ad3c9c", "12cdb75a7248233d70f31fcc0fa380b4b6641c4b5551dce963f97be43ac8fd67", [{0x4, 0x1f, "5cf103ac8f1237032e3bb3296f952e81c6ca52cf2b54a7c542a1bea7db7521"}, {0x1, 0xe, "a18d9165539b7431c0d932cb73ff"}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @random={0x0, 0xd2, "6cdedf67f2e0a4bfc310fe74347445f5a75c3bea1d99b82b28926adfe4fa5ea69529b7c3016b8105c2361a54be17f1fecc7d71cf1e78aae1a1bcf1ed0ec90e53eb0001fe2bf0a88252e01aa1bfe9887cc22c440264d6136c22de5caa3f71289da44f5d16cfeaaf89e827f1a782de2a74613efff7f71a450b34e8e5036ecc2ade1f056c9be3dd137465323b325d0e6d4d687fe771523c4495eebc4ea99cec3065539ff996ad854f1608776cb3e9cda6c7082e20f20b906144a195fdf38bed631f38e791f8803c737a7854f3c83daaa91cdf48"}, @prep={0x83, 0x1f, {{}, 0x7, 0x10, @broadcast, 0x0, @void, 0x1, 0x10, @device_b, 0x7}}, @challenge={0x10, 0x1, 0xc6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xa, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0xbc, 0x68}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4004092}, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @empty, 0x1, 0x3b, 0x2, 0x100, 0x6, 0x8}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000b80), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000bc0)=0x1, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r1, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e80)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @private, @local}, &(0x7f0000000f00)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) connect$bt_l2cap(r1, &(0x7f0000001080)={0x1f, 0x7ff, @any, 0x13, 0x2}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)="6fa379f47f8cfcd1285e945efce0cb47a7f8b68c71cdbe623a01c7116fc66bec8a1d5b108d94bc01f7bd21d400d9211644277f8e9f99a008e5981cb92b4b554685d8887295a43b1668224e27394d55d2326aefdac8afcf380b8f0116e09894879142e2917b8eb37e318a0aa52936cac8374b4e108d4ecd67406f41caeab890ae6cbc3aca284c22df7c05ac770ce5880f0c6f4101", 0x94}], 0x1, &(0x7f00000011c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x90, 0x0, 0x0, [0xe, 0x4, 0x3]}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x4, [0xffffffff, 0xff]}, @ssrr={0x89, 0x23, 0x90, [@multicast2, @multicast2, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @local, @multicast2]}, @timestamp={0x44, 0x8, 0x4d, 0x0, 0x9, [0x2]}, @generic={0x7, 0x4, "4303"}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0x4, [{@loopback, 0xc6d9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0x6}, {@local, 0x7}, {@multicast1, 0x3}]}, @generic={0x44, 0x6, "df4d6efd"}, @generic={0x8e, 0xb, "b6988d6e952129bf2c"}, @generic={0x86, 0xc, "2f6a6e2b7c49e7dc6e64"}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0x1, [{@broadcast, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x17, 0x1b, [@multicast1, @multicast2, @empty, @private=0xa010100, @local]}, @timestamp_prespec={0x44, 0x34, 0x17, 0x3, 0x9, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x168}}], 0x1, 0x1131b6b7fbe22acb) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001380)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000013c0)="4196a64dd60d406054781a3cc23935493338f5ad5eea02f73e3845aa4f63d560f7c1a05353cda1952073ac6bdee39ca9da9818ee6ea83e7856da1293c0e894e4bf2697e991ccd3ad55ae4396fa4bd670048c4fa20d18e237c8862756c89e2e6247ec75b47df2a68cd7e5ca5a5f1313c06bb55aceb2d6f612d9bb1ea15813e08dcbc5938b5b135e5a8f8828e13df4182954f0ebf7102db68dd467050cd70844f29f02", 0xa2}, {&(0x7f0000001480)="83af896266fe809f4f221313e31494fa60cefaf1090f2a05131a629e37cf6a7a94e258448c95fa801f792c5de0ab28a0969865f0f58e4e53f47e47336e336fbbb2e0c4bd73301cdc6946e9e8a21dce9c8283ba7acf700bd9083071aee7dae3baf05c0af4232251af046182d795840eec8688b31d1289a3cb187a784cc4f968c42ff9ef32b39cf63e5229b20c3d8019c11f1e9845f912ace5a3f19c8d48e69bfd6d9b66a27a7960d0c03886a0", 0xac}], 0x2, &(0x7f0000001580)=[@flowinfo={{0x14, 0x29, 0xb, 0x3c}}, @dstopts_2292={{0x20, 0x29, 0x4, {0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x6}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x73, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xff}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0xff, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x3, 0x5, [0xa9, 0xfffffffffffffeff, 0x1, 0x1, 0x0, 0x8, 0x8, 0x1000]}}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x108}, 0x800) 1.562474338s ago: executing program 5 (id=3413): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl(r4, 0x1, &(0x7f0000019440)="1dafdd1e4a1d160b6119d34aeab6a238f87f18011073d44cc100a855d79b3ce7d043f26846a6daf7c48c3a999071d6af6a2f352e2115ff6702320a18629b5038cdbbe0352210180bec5faf42fff381505042bf9e5179204ed564876d5d585e824994a18015a2f16a840b2b954f149d3afd61e1a4c703170dfe65d0ea4ff0df985b40df3257c9702a4b3b9d6094b41473e47e484a6c3d9cbedba42563f506256d10e4be4d82c96bc2209fad642a02113535cb1a1179a2a9fc0d6d638781267b4e22046fa965cac61f8b81fef6aa62fc6320b6009ee4ac9ca359651e872dcfffdfbc6756eb92dd57a4913486d358294c2192c9bd3bf13b75a4aaae728ed67d78848813a307d43d6fbe5997174a72875eac4fdaf73c3f05aab5655503a7deeb021fab7cedd0f151a8f5b7b6a658e6ba022b308e8ea4c40eb27cb1dc1352cf27e7ff5765981dc330f7769671cf87d15e145df306c8c4571a979caded91024a313d496d2420d1704a75cfdeef329b40da215f71ac8a3a4c8046e4fabbeed0371b80daa1918a7d30895b4d2915568ae8d8fa5c3868845dc566ae8f5ef0a5f1ffbdf5e431f6bd9860f9ae51f90299f803ee67913bfb110e9beee1de1c3468cbca8ae25d8e3282b9501f9f2a142788a36f689213d9b1467393334188ba1bf03b1b24bd26199af8d9b925472b28c14e929f772359fbd8a6636f704ce381a404e8d51d6af545d0784042c6f312f8c87472566df0f23c85c215246326cdb1f74e8c79442c89a18ae5cd752ce9114a40cba04e2ebe229debac27b1df733c6e12047eecf435ab5c4c1f906dd8bbe654c099f404a70ce88d81805aacc72d00c48c012baa5c14310cd12413e16d25f8b680377cb9ec6a36c985263145449637d0874409377cc1f2a36414d0e027770a7035547f420dcaea0ad6c0ab9230f05e80332db9263911c818189ea76dde719bee0d33a4e4800e4526f1950e11804883b58070f6516170b025dc7c26b18c5965e948cab7df68c4dfbe6fd74abc682d9e90e412d8944e00ed54b9e49e3c035d8dc4587b84f03097a2a561e5651756e322d04d254399c5e4343eba25282dda336d822e082eeae652a0c15fe2f1e3ebc3017f5c4ff598d2bc12f6ac2e27e0eb82b24fb0edf9ef76a74c40a228c97912d0437768c7f86f4e0e7a8af4d73e0509840571f4e65ca83915c775198710cbe37c6694c74e6f717d2b94fb318955981b868797dbd773b20808630b040e63188b238b4dba281567bc0c16b3b6551883ed394dee77df2bc439a8f2803108d8df93a329e7848723a62a0c2250a2f384db89a787cf4fbbfe173a9604cee1ddf5c1057a1f887f0f7dd621ca7b6a47c2055987502672e71cb0d172c1e25cb016c8a7f7705421d81901d35f43657148ed08d318b556b4e66ffab18fab3956d916aa04eb93bb7d69497b42e614c89863fa455ec5a7dd256945283101561f2f50c8c1170eb850a2eafad3b8cc43e1d3431833118316d7280800be5d2ae695c43d1fc15b22733dcd3feb081dad9dc1e7397be2eec03df805c5fb667093a70952305847af51ed05aa75ddbb7a132e5b98ed5acad7bef6752e0839a5dd616f671abd46aeb8bfe9387ee66750b8df92aaeef1d1838f019d6dcb195b764425dfaa015fde07f7f729a860f2f6cc1ff9e5043e9fc176b19b79f7e980788ccbb3129aa3d0fd9f4c098a6b13d07a655a2c6ca3d6f2f4bf63e7fd31a0c0fcc96a405793019178074af0be21adb7f1532d926465477081f7f01f02e18975575b0f9d4a4d3b32f48038c476358ae1a09534c257c351f4808489768781c9b00e2efb512b3bb92d710bc6a6495d5d9660968aa2b17bfcab767a4d7174a2986da2d93c7dac0250aa8ed59b3f22a7bb3be1940c5e183a4ea9db5cc5b8af389649c4dc38b54f4323cc9e9338d2e30d452a09942b55c7e6c378598521e2bf7034b3a4c7a1cdb4efba7adf3db69abf76d17dfed2789974661348e427993b7138e86bdf57c7602cd34c16ba4b965f4515d69312cbc452a0699ed99de3117bfc9b9c464f9e0535c05a1dc6b08d592e010dbf38efea09f6480dcb2d2696bbd2902246ea432c6e639077a7e4550c4b86724bebc8d6638576570a4a56a9fbf4843eac988de2b58dd584e5974f49608a9348ea651199fe861cc09aef2eb6cf0adf4b458545e0b7cfcac725a42fea428903960f01d92de450c5cd96827c33cb9217cdbc457a4631094c840e2c13741d71bec5957ab16e75397fe21e4a3eb261ed5195d68e2b369224b7976f146554e04858742ca1dfc406c24d7ee7a61d12fc58dfaf09778b523a958275f6368c397193da32615b2e865c94e4ae8733d3adf1c0cd71e87ed23b5cfd5e2e39a3330a3f490d783f77d374fd046422130cc8f8a90bd3584adad1f9825e6c5cf299f6204d35ff81a7107a01c9b2339058487891874b50a33016f8ddcc4c785e62ca11dbde55a40b0f08ae3bfc0b000d7e697868e50ee8f43e64463f1b896420586a285ea0f21e2c9e9f8e5a01af72d9c38458c6fafc038b326ade9d64b198b6636bedce03d8944a5e15ffab3be43c6d9d1799ee4d29873536cffda29825a859ce27fb837ebb51387b7337cd73c36eb1cc7fad0a643c739f4e0bd10d7e1384cc1d503ebeeb25648620b82ec06a547b7be96495eadd57cfda3edcaf0ec058ee8938151829d9a3a23d0d9fd722dddc47fe71a2ad0687e2087dcbcffd08c3da40e6ff31c1a84930e2742d23606648ba15997de27f90d0f8f8450f883cafadb253a745e0aa5b307cefe19e75e46625d82553206bf37b422ff46fb65ab441a29666234ad328b547210ac675ad14cb5566c1df72aaaf39751ac7dcf37ae805025c37d35a9424c3fe4553fecad17711046e29cdbe32080c701cefb9c9e4ef2d5f366fcdf78a34e62028fd114a6b5ac9a65bf9a5819091838ad569b69149592c199e74b415816da539d49cd320fea561270e7cb3a325d0f67703f9fed00956ec5a494853481bc80d95f8855d055fa5d0939ad31ebc4c070ec8ca71a90c6598e690351ba020184ed774e1eddedb170a935e8625840bb449e3bcf0715f8287e5092c2961552a8516cb7845a79df77c3e734242bc5e313de323969ac6b902585af28a005284ade3365fd8296d24e6ef4d4272fa313b4d63f3a7b4102bf8592ac81efba74d1b8aada5640f1d6256cae4e111d68745ed571e811a761593f34447e971c8b494fa82a5b5ef8282930654c6efe509677e4bdf228dcdcfd29d9dd99bcbfa6f70ca1c67b55255416f9e96c943e6b9df93c6c8166f1bbb3170cc2e27434927161fb95c70936c70d82ee178bf3f8455381aacf21d8ee953b322c9da38663dc0ea8c2fd51dcc8371e99630989d5f63579bcd220cd8a1e2c30a9883b8c8e4fd09812b503789a91b0ae75d15d0bf0b10d4cacca3b8b8b9079c01fb1623aed9b9a3b907e0f3ac0637c89e0d28ecd3b95559cd9bda2dd5d7907b08ece5f6a9c98abc86c60fd9af70fccf49fa21e6713019c547067c3ce842cd14b6a803ab0196fd0d9a60836951658dcc4a564e3897304ca5fb43a5bfbd37b42c46179a2d25c8eca4eb176e441f18c7ca4a5989c017a5ae322cde4d12dd013585e77ac7a28f90769c985d0ec42c8a7ebe4abfb33c12bd02f0d294c4eb875b31948436df54f17d85885045b7119b3e2563dd3c3642db3c0e9f8dd7fe2c071fcce18a9f0bd4f3a74487b270ed06874152e898062093abaf77422e135aed0725d9f48ed84ff97c8d8cc38e0b9b1a960d8702ec08aace2323ada3657bd1d2c81b2ca5e05013a61919382a733f80b83a265f40719dcf3622543ae1b135ba83187dfdafcb980cf9f629a6b0a215ef23499de525738d4aea564e991e575ae4cc26b67fc499baa42d4b0a17a9fa63a79c54371a41f5a387dfc20c295c94c0e58f1d9a4949bdbcb6d0c07d3a79cf5d99d044d4032c71eeb592aa633b2ee7a776a082023b5d6510128c19719839327e62faf514610eae559fae91dcd3e997c9985c281f3132ce75b70c66dadbfd981fb04e982dbf40b2e68da938d38e5c1095330e301d589b79702f7b8ac5add75322d281d2bc0e4e631ea6609be28d4eee30bccd29140f22ba36a4f92f76a9e7b2f930c1a35a7b1a642c6f183d62466b5755d3b18ab2c9b972b936d1126c4ac3c31fd74165348b05d4c1c9d2e69e6f70441f319d46247912633a77079d6015246de00ad7509ceee646fb30aa595981427ec522c7c42b61efbef64512ce53581b49a7916e7541c06621af8a64395cdfe1769d1c5f565cd41b3d0bc735b87cafe36374b391965562e857e6a8898a15d70715a98a6ea7d54f0b1857e55e5c3420c1f4f68125107ed2845886f784bd3236df3fafba4b3dc22817b6b200a1448fea6e491b33e9c2b5ec7c891cae4f3db380d7413ede6e864c5906584c13b37125777a737ed95227f7e7a3f40231462038f7d9b5a034af820742f6c92bc035f0127f25abfdf4e857a7d359e16e72b7b631677b7b77e4b81cd4efff5143816096c3eb96b10e676ff0af16a6f5a8fb110e200bd89ac14bdf61321516a5df95bc7a2a2521e13226b9df980c121983ce23b614a24438c7ce12fd29907dbe95f5ad37e51d0f4e19e0b8d54c2d4ef768c569357cf7bd971b7a5989a2e7a0b73556a47d71875220f6565686b59c45b90c42e98af25d61181df8cb0e94052e8163df9eb231c67a1d04cdd40c8dfac29862423cadf552771cd9c2a8db8f436b3ffcb3438ed4dc3142e64b0f8358041dbb3d91c3ad6eeb7f2e2eaa50840cffa9383fed6fcd782c4f34da0e22428979cbf50ddebe17ac545f21e91e5c5562544db4078f4bb8b8722a58189b2ac3e316f14c68da5212c4fb16ef435a1c0789d9a1cf997bd892922f009a2cc67de5dc15a1e6dfecba33251ffb2be41c978d484b8f17252485d7bbf75efa6c421d9b708179344c3f309f077813529dff4fceeebac648be7dfe9a5ffc553d6889716c7844f4aa2dae33107d51746522ca6a6a9e05a0072d3ad7d5803fbadc6f5ddf8d15a7bb6280083c42ede1cb7252949d7bffc800803013df499f17cb4123f54867fd7a4b2ab10d38f8337444403fcc92006e7cb9b9de75108f05119c1fad4838e99cf6651bca61eca06eb552cf5e46a26b577441298273493f5d524ef3e1bf41a6e6f4568fe1c87884a47f41f9bf49b6f792949222da6c3af2376e4956a30e2fda27e7acd3ab8b4c7def98b2d91263d9ecebfbcda34c091fe1fd334531222d1cd2f30662be7de8b88c126a713e799a4cca3fe26dedfa925edfab9f927a0537448e75ec4092496c44bece95adff2f1cc525de674aa4f58130421e2d2410478557f6a1479c34bb75343001db77cc2220a6465b7896382b8e45f7fc140383cc91ba1a8145fb49033f49f7e159da7b274ebf11a32c4d9af73d8367670fc3fd980c73358712e1844e54caf4ece34f921035f271f87a39e1205f451e1543c25d20f8a1de2ebc74227e47ab8d86c2a8b89907d2dbd03dad9a726edf5d27c0d64825b5cd57089d2d4d6b6cfd3b9dbe6a6cebadced5ac1575ba6f807baa4b1f9d46c6945543f2542df46416193045ae8a23184beabf1d9327a987ef1a205a20db982522e731f109b60a3410b78ecc7c6173dc73b129d19d3fa2acecb631b8629e4c4c9cddd6430ad87bccb8a90a340bc17c99618ca6e3c2a047219425fd30f9edc59a59dfa83bcfb3b37f4794f53e351c686a638de0d0431635af9408c75f0176a492a006825bfd5f7525e5c26a16f840e8a0631f03") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@loopback={0xffffffffffffc0fe, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x0, 0x2000, 0xffff}, 0x20) recvmmsg(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000003c0)=""/235, 0xeb}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x2000004c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000c00000000000000000000009500edff00000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$xdp(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="f689c52faf9ae78a0a010e5ad621dbd20e3fe2baf5686a720dfbbd4a85151aad1bcfdbbbee953e6c9487c995de9130e12540469a9dec0c5e94245c", 0x3b}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="4bbb2000f12c3a5dd8c2711c3ecf2f16e7670c2d164ed42aab88586a75d8d755d4408fd4d1547f922c4eea8b81d0408756bb2bd4e8d4ca6e503d2f0bb1e1f8283b9313ebdbd6494f6afb58427cc9a6b3331c81d8ac3cd679530970ce7bfbc529170a55a1edf67f2750a4e7e6e81164ba4befe5f8d988f80c83a8295ee37d0d88aedd585ce8193df46df33df4547215318c341626284ec36118a02c4b893fdd3206972af2824305ef6522df3151b67286724fa19b25fcc245bd96467fc10b2815ca80c387e44ca0d0f3d87355508d521e0473b76d2e589e462bc801ac74700477d3715e6ac68efdadd234f467", 0xec}], 0x5, 0x0, 0x0, 0x81}, 0x4008060) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a300000000008000240"], 0xb0}}, 0x0) write(r0, &(0x7f0000000000)="09000000010000", 0x7) 1.510877668s ago: executing program 4 (id=3414): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000004b80)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x30, 0x0, @wg=@response={0x2, 0x4, 0x0, "954819110bcf22796f6cb28be9a1224c000be94660dd39d2cb40f22ff59e284c", "9432ca693246dd965f2232f1884e12b4", {"984b5769ec3117e138db720f57b59775", "08cb0087a738e17dda00000d00"}}}}}}}}}, 0x9e) 1.462492983s ago: executing program 6 (id=3415): r0 = socket(0x1f, 0x800, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x6, 0xcc, 0x4}, 0x10) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cfa000000013291b4d099fbdb2"], 0x14}}, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000130001002bbd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000020000000000000a0040002b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000030000000084010500e0000001000000000000000000000000000004d6330000000a001000ffffffff0000000000000000000000000135000003030200040000000b0000000900000000000000000000000000000000000000000004d4320000000a000000e0000002000000000000000000000000033500000401590004000000080000000000000000000000000000000000000000000000000004d63c00000002000000ac1e000100000000000000000000000003350000010201000a0000000008000082fb000000000000000000000000000000000001000004d6320000000a000000ac1e0101000000000000000000000000000000000102f80008000000020000000100000000000000000000000000000000000001000004d53c"], 0x23c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) (async) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00') socket$inet(0x2, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x6) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 1.413312659s ago: executing program 6 (id=3416): r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r4, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) 975.749187ms ago: executing program 2 (id=3417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x1, 0x20, 0x40, 0xffffe000, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x13, 0x49, [@multicast1, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_addr={0x44, 0x44, 0x74, 0x1, 0x4, [{@multicast1}, {@remote, 0x492d}, {@local, 0x4}, {@private=0xa010102, 0x2}, {@empty, 0x3}, {@private=0xa010101, 0x481}, {@broadcast, 0x64}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000004f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004f40)={&(0x7f0000000e80)=@delchain={0x40b0, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0x5}, {0xfff3, 0x6}, {0x10, 0xfff1}}, [@f_tcindex={{0xc}, {0x4080, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7f}, @TCA_TCINDEX_POLICE={0x468, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x600000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x6, 0x4, 0xf, 0x7, 0xff, 0x5, 0x6da, 0x7a065d53, 0x3, 0x3, 0x1, 0x5, 0xd3e, 0x7, 0x2, 0x3, 0xd2f, 0x7, 0x9, 0xffffffff, 0x1, 0xa, 0x7, 0x1, 0x400, 0x0, 0xffffff00, 0x18c, 0x3, 0x495, 0xfff, 0x6, 0x3, 0x3, 0x8, 0x130b, 0x0, 0x6, 0x10, 0x2, 0x8, 0x401, 0x1, 0x7, 0x5b0c, 0x9, 0x3, 0xc, 0x9, 0x2, 0x9, 0x4, 0x7ff, 0x5, 0xfffffff8, 0xffff, 0xffff, 0x7d36, 0x3ff, 0x2, 0x3ff, 0xe840, 0x2, 0x4, 0x9, 0x0, 0xfffffffa, 0x101, 0x6, 0x8, 0x3ff, 0x1, 0xffffffff, 0x80, 0x0, 0x7, 0xffffff80, 0x4, 0x80000000, 0x1000, 0x6, 0xd, 0xf7fc, 0x5, 0x2, 0x59, 0x6, 0x8, 0x7f, 0x6, 0x4, 0x3, 0x1, 0x0, 0xffff, 0x5, 0x1, 0x5, 0x0, 0x8, 0x1ed8, 0x660, 0x4, 0x679, 0xb6, 0xdc66, 0x9, 0xff, 0x7f, 0x2b1a, 0x27, 0x9, 0xfffffffe, 0xc, 0x1, 0x2, 0x2109c7ac, 0x9, 0x5, 0x1, 0x8, 0x5c, 0x4, 0x8, 0x7f, 0x9491, 0xc84, 0x2, 0x9, 0x0, 0xf8, 0x7, 0x1, 0x4, 0x488d, 0x8, 0x93, 0x6, 0xa, 0x4, 0xfffffdcf, 0xc0000, 0x7f, 0xfffffff7, 0x862c, 0x3, 0x0, 0x3, 0xc, 0x2, 0x573, 0x8000, 0xfffffffd, 0x1, 0x7fffffff, 0x8, 0x10, 0x7, 0x8000, 0x0, 0x5, 0x7, 0x1ff, 0x6, 0x4, 0x7, 0x5, 0x1, 0x3a, 0x4, 0x8000, 0xc6, 0x4, 0x800, 0x2, 0x4000, 0x5d, 0x2, 0xc, 0xc, 0x6, 0x9, 0x1000, 0x0, 0x4, 0x7ff, 0x0, 0x1, 0x7, 0x2, 0x9, 0x2, 0x8, 0x1, 0x983, 0x400, 0x4, 0x4, 0x4, 0xc23, 0x6, 0x2, 0x1000, 0x1, 0x7, 0x8, 0xfffffff7, 0xfffff801, 0x0, 0x0, 0x9, 0x8000, 0x8000, 0x48, 0x10001, 0x6, 0x7ff, 0x7, 0xb9, 0x7ff, 0x1, 0x9b37, 0x875, 0x8, 0x6, 0x1, 0x8, 0x2, 0x5, 0x3, 0x40000040, 0x7, 0x5, 0x5, 0xd1ac, 0x6, 0x4, 0x80000000, 0xd, 0x9, 0x7ff, 0xc6b6, 0x6, 0x0, 0x4, 0x0, 0x10001, 0x80000001, 0x86, 0xedd6, 0x6, 0xfffffffd, 0x1, 0x8, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb2, 0x2, 0x1, 0x9, 0x200, {0x7, 0x1, 0x6, 0x9, 0x6, 0x7}, {0x3, 0x1, 0x3ff, 0x1, 0x5, 0x3}, 0x9, 0xd987, 0x3}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7eb}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}, @TCA_TCINDEX_ACT={0x25dc, 0x7, [@m_tunnel_key={0x44, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0xb1e674d51950b717}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x124, 0x19, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="464444bde859"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x917, 0x1, 0x5, 0x101, 0x100}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x639a}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd77}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0xa8dc}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfff, 0x5, 0xffffffffffffffff, 0x55, 0xc0d1}}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xf46}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x39, 0x6, "cbc6f5928d99338d27c0604f31189aea81f82b635b8c8e645a96a09bd4eb8e9be4e149add5cc58de6644036d64357e5054c466dc30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x19c, 0x7, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x9, 0x2, 0x81, 0x10001}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x10000, 0x1, 0x1, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10000, 0x0, 0xffffffffffffffff, 0x8, 0xc}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x64, 0x19, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffff521}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd}]}, {0xe, 0x6, "6757dcacd758b2170a46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1ed0, 0xc, 0x0, 0x0, {{0xa}, {0x1e50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x7, 0x20f2, 0x7, 0x4, 0x9}, 0x2, 0x7, [{0xcc2, 0x4a, 0x6, 0x3, 0x3, 0x2}, {0x10, 0x2, 0x6, 0x6, 0x6}, {0x1, 0x3, 0xd, 0x55bd, 0xfffffffc, 0x4}]}, [{0x80, 0x2, 0x80000000, 0x16a4, 0x8, 0x7}, {0x4, 0x5, 0x3, 0xfffffffe, 0x6, 0x4}, {0x0, 0x8000, 0x3, 0x4, 0x7, 0xc1}, {0x81, 0x0, 0x9, 0x200, 0x873, 0x7}, {0x6, 0x797, 0x2, 0x3, 0x8499, 0x10}, {0x3, 0x0, 0x7, 0x13, 0x2, 0x8}, {0x1000, 0x516, 0xb, 0x81d, 0x2, 0x5}, {0x8, 0x8, 0x7, 0x422, 0xa4, 0x7ff}, {0x0, 0x7, 0x2f2, 0x101, 0x80000000, 0x10001}, {0xe9e, 0x6, 0x3ff, 0x5, 0x1f, 0xc89}, {0x400, 0xffffa04a, 0x5, 0x9, 0x7, 0x2}, {0x2d59, 0xffffffff, 0x2, 0xffffffaf, 0x875, 0x1ff}, {0x0, 0x5, 0x6, 0x7, 0x6, 0x1}, {0x101, 0x8001, 0x5, 0xf, 0x23, 0x2f}, {0xe46, 0x2, 0x5, 0x9, 0xfffffff1}, {0x4, 0x80, 0x66, 0x6, 0x1, 0x8d}, {0x1c0000, 0x1000, 0x8, 0x3, 0x1, 0x2}, {0x3, 0x4, 0x200, 0x8, 0x7, 0x9}, {0x4b, 0xffffff00, 0x305000, 0x1, 0x7, 0xfffffffd}, {0x100, 0x10, 0x55, 0x6, 0x4, 0x7ce}, {0x7, 0x2, 0x2, 0x3, 0x542, 0x7}, {0x2, 0x3, 0x5, 0x8, 0x9, 0x1dcb}, {0x5, 0x0, 0x6, 0x4, 0x9fd5}, {0x9, 0x9, 0x800, 0x4, 0x0, 0x1}, {0x5a00, 0x9, 0x6, 0x6, 0x1, 0x7}, {0xf, 0x4, 0x8001, 0x5c, 0x7fff, 0x8}, {0xfffffffd, 0x8, 0x8001, 0x6, 0x0, 0x8}, {0x800, 0x3ff, 0x5, 0x3, 0x0, 0x7365af17}, {0x101, 0x0, 0xffff, 0xffffffe3, 0x6, 0x2}, {0x49, 0x7a7f, 0x800, 0x7, 0x9, 0x7}, {0x3ff, 0x5, 0x2, 0x20, 0x7fff, 0xec3}, {0x6, 0x7f, 0xff, 0x10, 0x3, 0x3}, {0x7, 0x1fc000, 0x0, 0x2, 0x2, 0x6}, {0x5, 0x7800a231, 0x9, 0x8, 0x1, 0x7}, {0xb, 0x4, 0x800, 0x7fff, 0xf, 0x5}, {0x3, 0x1, 0x7fffffff, 0xfffffff7, 0xa1e}, {0x7ba, 0xfff, 0x5, 0x2, 0x7, 0x8}, {0x1, 0xfffffffc, 0x8, 0x7f, 0x80000001, 0xf}, {0xee, 0x10000, 0x0, 0xc167, 0x8, 0x1}, {0x4, 0x7, 0x3ff, 0x10001, 0x1, 0x4}, {0x4709, 0xf, 0x0, 0x8, 0x85, 0x8}, {0x552, 0x7, 0x8, 0x305, 0xfffffff9, 0x401}, {0x0, 0x8, 0x2, 0x8, 0xe0f4, 0x5c}, {0xff, 0x6eb9, 0x9, 0x5, 0x434e}, {0x0, 0x80000001, 0x0, 0x8, 0x7b60, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7899, 0x3}, {0x80, 0x1000, 0xf, 0x3, 0x8, 0x9}, {0x4, 0xfe5, 0xd, 0x10001, 0x4, 0x7c9b}, {0x8000, 0x3, 0x7, 0x7, 0x1, 0x4}, {0x7, 0x100, 0x1, 0x0, 0x7af3e21b, 0xffffffff}, {0x40, 0x9, 0x2, 0x7, 0xf, 0x8}, {0x1, 0x9, 0x4, 0x6, 0x4, 0x3}, {0x54, 0x5, 0x1, 0x1, 0x8001, 0xffffffff}, {0x93, 0x5, 0x100, 0x1, 0x9, 0x7}, {0x1, 0x101, 0x950, 0xde4, 0x58f, 0x4}, {0x8001, 0x5, 0x523d, 0x5, 0x100, 0x1}, {0xbb, 0x2, 0xff, 0x0, 0x722, 0x84}, {0x3, 0x0, 0xa78c, 0x7, 0x80000001, 0x7}, {0xc, 0x2, 0x9, 0x0, 0x8, 0x9}, {0x4a43, 0x8, 0xfff, 0x7, 0x2, 0xa3}, {0x7, 0x1000, 0x4, 0x4, 0x784, 0x4}, {0x5, 0xd, 0xfffffffa, 0x6, 0x4}, {0x4, 0x1, 0x3, 0xc, 0x7, 0x6}, {0x3, 0x7, 0x2b6f, 0xc7, 0x9, 0x68}, {0x0, 0x2, 0x7fff, 0x0, 0x3, 0x982e}, {0x80, 0x8, 0x835, 0x40, 0x1, 0xd}, {0x5539a636, 0xfffffff9, 0x0, 0x800, 0x0, 0xff}, {0x2, 0xfffffff8, 0x7, 0x1, 0x5a, 0x5}, {0x1, 0x7, 0x1000, 0x66e, 0x5, 0x3}, {0x6, 0x10001, 0x5243, 0x70000, 0x0, 0x4}, {0x596232d0, 0x0, 0x8, 0x0, 0xffff, 0x401}, {0x1, 0x5, 0x44, 0x3c, 0x96d9, 0x29db1a82}, {0x6, 0x7fff, 0x5, 0x8, 0x8000}, {0x1, 0x2, 0xba3, 0xffffffff, 0x7, 0x7fffffff}, {0x8, 0x7, 0xb, 0x1ffe00, 0x2, 0x400}, {0xa0, 0x7fff, 0x5, 0x8, 0x3, 0x7fffffff}, {0x1, 0x753e, 0x0, 0x0, 0x0, 0x401}, {0x10, 0x4, 0xf79, 0xffffffc8, 0x1903, 0x80}, {0x8, 0x5, 0x33, 0xb886, 0xfffffffe, 0x8}, {0x4, 0xd8, 0x7, 0x2, 0x2, 0x3}, {0xed, 0xa, 0x7, 0x1000, 0x4, 0x4}, {0xfffffffe, 0x6, 0x1000, 0x8, 0x3}, {0x4, 0x5, 0xfffffff9, 0x1ff, 0x183a, 0x4}, {0x2, 0x5, 0x1, 0xfffffff7, 0x0, 0x1}, {0x2, 0x9, 0x8, 0x4, 0x10001, 0x39a}, {0x3, 0x3, 0xf, 0x4, 0x9, 0x2}, {0xe, 0xa1b, 0x8, 0x80, 0xf4}, {0xf4, 0x2e, 0x36, 0x8, 0x400000}, {0xd, 0x6, 0xffff9987, 0x9, 0x7fffffff, 0x10001}, {0x101, 0xffffffff, 0x7, 0x4, 0x101, 0x3}, {0x10, 0x0, 0x7a6bcfff, 0xfffffff7, 0x46, 0x2}, {0x10000, 0x7, 0x4, 0x0, 0x3, 0x7}, {0x4, 0x32, 0x1, 0x6, 0x23, 0x2}, {0x6, 0x3, 0x8, 0xfffffffc, 0x3, 0x80}, {0x1, 0xa8e, 0xf93, 0xd11, 0x3, 0x7}, {0x400, 0x6, 0xf, 0xffff, 0x1a, 0x9}, {0x7, 0x8001, 0x101, 0x7, 0x0, 0xa61a}, {0x7, 0x401, 0x0, 0x7, 0x6681}, {0x9, 0x100, 0x1, 0x8001, 0x9, 0x3}, {0x7, 0x3ff, 0xee6, 0xffff8000, 0x2, 0x400}, {0xfffffbf9, 0x0, 0x1, 0x33111eb3, 0x10, 0x8}, {0x3, 0x67, 0x7, 0x101, 0xfff, 0xdeb}, {0x101, 0xdb6b, 0x0, 0x1, 0xe, 0x6}, {0x597, 0x9, 0xb6e, 0x3, 0xffffff4c, 0x7ff}, {0x3, 0x3ff, 0x5, 0x3, 0xddd, 0x8}, {0xfffffff8, 0x4, 0x6, 0x7ff, 0x2, 0xaee}, {0xdac, 0x7, 0x57af, 0x1, 0x8, 0x800}, {0x6, 0x80000000, 0xad75, 0x7fff, 0x6, 0x851}, {0x80, 0x8, 0x400, 0x7, 0x50, 0x1ff}, {0x401, 0x5, 0x0, 0x3, 0xfffffff7, 0x3}, {0xe2e2, 0x7, 0x200, 0xbb8e, 0x5, 0x1}, {0x81, 0xfffffff8, 0xd8ef, 0x1, 0xfffffffc, 0x1}, {0x9ca1, 0x80000001, 0x5, 0x3, 0x1, 0x6827}, {0x0, 0x0, 0xff, 0x6, 0x5, 0x1f10}, {0x5, 0x0, 0x9, 0x16, 0x4, 0x7cd}, {0xa1, 0x1, 0x1, 0xd1, 0xfff, 0xdc}, {0x5, 0x3, 0x4, 0x7, 0x7}, {0x3, 0x6, 0x7f, 0xfa6a, 0x1, 0x9}, {0x4, 0x1, 0xbf, 0xe16, 0x868, 0x5}, {0x8, 0x6, 0xe267, 0x7ff, 0x7462, 0x7}, {0x8001, 0x8000, 0xff, 0x3, 0x6, 0xb}, {0x7fffffff, 0xff, 0x4, 0xffffa1b8, 0x602, 0x6}, {0x6, 0x5, 0x5, 0x12dc4211, 0x4d49, 0x7}, {0x6, 0x6, 0x1631, 0x6, 0x26b, 0xfff}, {0x8, 0x5, 0x2, 0x0, 0x340, 0x4d3b}, {0x8f, 0x5, 0x1, 0x1eec5e70, 0x7, 0x1}, {0x200, 0x10000, 0x6, 0x6, 0x7, 0x5}, {0x7f, 0xffff, 0xfff, 0xfffff04e, 0x5, 0xff}], [{0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x6}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x10f2a3f01b4d756f}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x4}, {}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0xcd, 0xd, 0x3, 0x4, 0x5}, 0x0, 0x3, [{0xb888, 0xc, 0xffffffff, 0x4b, 0x3ff, 0x8}, {0x7, 0x25, 0x6e, 0x8, 0x5, 0x4}, {0xfffffffe, 0x2, 0x80, 0x9, 0x100, 0x9}, {0x600, 0xd, 0x9, 0x3ca, 0x9d0e, 0x5}, {0x8, 0x5, 0x5, 0xfffffffe, 0x0, 0xc0c}, {0x2, 0x8000, 0x1, 0x3, 0xffffffff, 0x5}, {0x8001, 0x7ff, 0x6, 0x5, 0x2, 0x1}]}, [{0x5, 0xe79d, 0x6, 0x716, 0xd66, 0xc}, {0x885, 0x7fffffff, 0xc, 0x8, 0x0, 0x4}, {0xfffffffd, 0x5, 0x4, 0x5760ba3c, 0x4, 0x7}, {0x8, 0x2e5, 0x5, 0x3ff, 0x81, 0xa}, {0x401, 0xff77, 0x8, 0x3b00, 0x4, 0x1}, {0x622, 0x0, 0x6, 0x80000001, 0x2, 0xe000000}, {0x7fffffff, 0x1ff, 0x1, 0xd, 0xb02}, {0x400, 0x8, 0xff, 0x1, 0x2a, 0x10000}, {0x2, 0x7, 0x80, 0x0, 0x3, 0x93}, {0x2, 0x800, 0x9, 0x3ff, 0x200, 0xfffff44d}, {0x2, 0x458bc2a9, 0x4, 0x2, 0x2, 0x5}, {0xffff608f, 0x7, 0x7, 0x7, 0x401, 0x1ff}, {0x9, 0x6, 0x6, 0x40, 0x9, 0x1}, {0x2, 0xfffffffb, 0x200, 0x0, 0x0, 0xa7c}, {0x6, 0xd546, 0x80, 0x80000001, 0x0, 0x8001}, {0x3, 0xfffffffa, 0x3, 0xe, 0x7, 0x3ff}, {0x5, 0x1, 0x4487, 0x9, 0x24e, 0x3}, {0xba, 0x7f, 0x5, 0x71b, 0x1, 0x367}, {0x3, 0x5dda, 0x28, 0x1}, {0x0, 0xffffff32, 0x7, 0x8a, 0x0, 0x3}, {0x5a, 0x9, 0x3, 0x896, 0x4, 0x6}, {0x4, 0x8001, 0xb, 0x7, 0x3, 0xe}, {0x7fff, 0x80000001, 0x1, 0x5, 0x9, 0x24ae}, {0x0, 0x1, 0x8, 0x7f, 0x1000000, 0xfffffffd}, {0x0, 0x7fffffff, 0x400, 0xcf, 0x2, 0x40}, {0x2, 0x0, 0x6, 0x4, 0x200, 0xc}, {0xb7, 0x3ea, 0xfb11, 0x800, 0x5, 0x4}, {0x4, 0x0, 0x0, 0x2, 0x3, 0xc5}, {0x2, 0x8, 0x56a2, 0x3, 0x9, 0x4}, {0x3, 0x767a, 0xfffff801, 0x7, 0x2, 0x2}, {0x3, 0x2, 0x3, 0x3, 0x4, 0x1}, {0x8, 0x58b, 0x3, 0x1, 0x0, 0x9}, {0x400, 0x4, 0x1, 0x7fffffff, 0xd6361f0, 0x7}, {0x3, 0x6, 0x5, 0x8, 0xfffffff8, 0x8}, {0xffff, 0x9, 0xf, 0x6, 0x8, 0x4}, {0x8, 0x9, 0x100, 0x8, 0x3, 0xd8}, {0x4b7a3b3a, 0x2e286176, 0x4, 0x81, 0x186, 0x2}, {0x7, 0x8, 0x4, 0x8, 0x23, 0xde}, {0x101, 0xef, 0x9, 0x933, 0x400, 0x8}, {0x7, 0x9, 0x3, 0xa37, 0x8dab, 0xfe}, {0x7, 0xfcd, 0xe, 0xe, 0x9}, {0x1, 0x1ff, 0xf4, 0xdd, 0x8, 0x3}, {0x4, 0x5, 0x3ff, 0xd, 0x5, 0x1}, {0x5, 0xfffff841, 0x8, 0x6, 0xbb, 0x400}, {0x39a, 0x2, 0x0, 0x47, 0x2, 0x1}, {0xffffffff, 0x4, 0x4, 0x5, 0x800, 0x5}, {0x91, 0x40, 0x8000, 0x4, 0x7, 0x401}, {0x5, 0xf7, 0x7, 0x3, 0x5, 0x1}, {0x9, 0x10000000, 0x8df, 0xaa, 0x6, 0x80}, {0x7f, 0x100, 0x8, 0x7f, 0x10001, 0x7}, {0x3, 0x4, 0x401, 0x9, 0xebfa}, {0x100, 0x7, 0x0, 0x7, 0x7, 0xfff}, {0xa3, 0x7, 0x4, 0x5, 0x5, 0xffffbe84}, {0x8, 0x9, 0x40, 0x8, 0xd0f}, {0x4, 0x7ff, 0x6, 0x2, 0x5, 0x1}, {0x6, 0x6, 0x3492, 0x6, 0x5, 0x6}, {0x1, 0x8, 0x5, 0x9c, 0x8, 0x2757e72f}, {0xf, 0xf889, 0x8, 0xfffff499, 0xe82, 0x1}, {0x40, 0x0, 0x64, 0x7f, 0x9, 0xa7}, {0xffff, 0xffffffff, 0x40, 0x9, 0x3, 0x9}, {0x2, 0xffff8001, 0x2, 0x7, 0x5, 0x3ff}, {0x6, 0x4, 0x800, 0x8, 0x4, 0x7}, {0x4, 0xfffffff8, 0x8, 0x72, 0x101, 0xffff}, {0xa, 0x31, 0x7, 0x3, 0x1}, {0x2, 0x447, 0x8, 0x100, 0x800, 0xf2b}, {0x1, 0x1, 0xffffffd4, 0x9, 0x4, 0x5}, {0x4, 0x9, 0x2, 0x5, 0x0, 0xd38}, {0x84c, 0x100, 0x8001, 0xec, 0x7, 0x8}, {0x1, 0x1ff, 0x2, 0x8, 0x3, 0x5e}, {0x7, 0xfff, 0x3, 0x5, 0x9, 0x5}, {0x101, 0x0, 0xfff, 0x100, 0xdfa7, 0x4}, {0x8, 0x3, 0xc, 0x9, 0x3, 0x6}, {0x1, 0x8, 0x4, 0xc8, 0x9, 0x2}, {0x8, 0x40, 0x4, 0x9, 0x8, 0x2}, {0x1ff, 0x72, 0x6, 0x7, 0x6, 0x2}, {0xf16d, 0x2, 0x44, 0x5, 0xeb20000, 0x5}, {0xe, 0x2, 0x5ad5, 0x0, 0x9, 0x50}, {0x672b, 0x1, 0x2, 0x5, 0x80, 0x2}, {0x200, 0x6, 0x0, 0x8, 0x0, 0x40}, {0x70, 0xb, 0x9, 0x56, 0x7, 0x3}, {0x0, 0x5b, 0x9, 0x9, 0x0, 0xfffffffe}, {0x5, 0x6000000, 0x3ff, 0x8, 0x60f7, 0x56}, {0x5, 0xfe74, 0x2, 0xffffffff, 0x5}, {0x2, 0x2, 0x5, 0x81, 0x5, 0x7fff}, {0x10, 0xb55, 0x0, 0x3, 0x3de, 0x7}, {0x3, 0x8, 0x10000, 0x8, 0x8, 0xb}, {0x3, 0xb7be, 0x8, 0xff, 0xad, 0xfffff7ab}, {0x3, 0x8, 0x3ff, 0x0, 0x7, 0x4}, {0xe, 0xffffffff, 0x1, 0x2fee, 0x527, 0xf}, {0x3, 0x9d, 0xf64, 0x4, 0x4, 0x9}, {0x10000, 0x9, 0x9e, 0x2f8, 0x3, 0x7}, {0x4, 0x6, 0x9, 0x7, 0x19d, 0x7828}, {0x9, 0x0, 0x9, 0xb, 0x6, 0x6}, {0x1aa, 0x3, 0x4, 0xaba2, 0x4dc5, 0x4}, {0x8d, 0xb5f4, 0x5, 0x5, 0x200, 0x6}, {0x2, 0x3, 0x7, 0xfe20, 0x5, 0x8}, {0xfffffe01, 0x6, 0xb, 0x7, 0x2, 0x7}, {0x5, 0xffffff4f, 0xd8b, 0x118b027, 0x2, 0x9}, {0x9, 0x2, 0xba48, 0x8, 0x4, 0x5}, {0xfffffffd, 0x5, 0x8, 0x3, 0x2, 0x7a97}, {0x4, 0x6000000, 0x5, 0x7, 0xe, 0x2}, {0xe, 0x3ff, 0x6, 0xffffffff, 0x6ac, 0x3}, {0x0, 0xffff, 0xfe00000, 0x3, 0x7, 0x800}, {0x1, 0x401, 0x8, 0x6f, 0x4, 0xfffffffb}, {0x3fe, 0x3, 0x9, 0x2, 0x2, 0x4}, {0x0, 0x0, 0xfffffffd, 0x7fffffff, 0x0, 0x4}, {0xe, 0x5, 0x8, 0x3, 0x6}, {0x5, 0xe49, 0x2, 0x2, 0x0, 0x80000001}, {0x6, 0x3, 0x19f618ec, 0x8, 0x7ff, 0x3}, {0x0, 0x9, 0x2, 0x8, 0x3, 0x2}, {0xbe, 0x9, 0x1, 0xd, 0x7fff}, {0x8, 0x5, 0xfff, 0x9a86, 0x3, 0x8}, {0x8000, 0x2, 0x7, 0x3, 0x0, 0xe}, {0x7, 0x1, 0x0, 0x8001, 0x78d, 0x3}, {0xfffffff8, 0x9, 0x0, 0x5, 0x9, 0x4}, {0x8, 0x3, 0x6, 0x1, 0xc54}, {0x80000000, 0xffffffff, 0x9, 0x6, 0x9, 0x4}, {0x226, 0xffff, 0x7fff, 0x9, 0x2}, {0x5, 0x1, 0x100, 0x4, 0xffffffff, 0x6}, {0x80000001, 0x8, 0x7, 0x1d2, 0x62e0, 0x18}, {0x4, 0xffffffff, 0x29c, 0x6, 0xfffffffb, 0xfffffffa}, {0x8, 0xfffffff8, 0xf, 0x9, 0x7f, 0x7}, {0x0, 0x3, 0x8, 0x5, 0x3, 0x5}, {0x3ff, 0x27a4, 0x80000000, 0x8, 0xffffffff, 0x3}, {0xb25, 0xff, 0xf, 0x8, 0x7, 0x8}, {0x6, 0x0, 0x8, 0x1, 0x5, 0x7}, {0x6, 0x7fff, 0x3ff, 0x4, 0x10, 0x38}, {0x800, 0x7, 0x6, 0x1, 0x2, 0x101}], [{0x4, 0x1}, {0x1}, {}, {0x3}, {0x2, 0x1}, {0x6, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x34cb0f207bc808a2}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x5}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0xcc6ec0e07f996e2c}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x3, 0x1}, {}, {0x3}, {0x61bac8c10ed63476}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xd2d10ea0e04cb796}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x55, 0x6, "3c3f4c490339d6faf38dd02018707018166e4ab0aece730cc05ed45db87f37e549c04456dec60e42ecc065a340317da08968655e508ba924382433c38d65f3539c22e175900e53398c75ab065c82dc609e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x164, 0x10, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xff, 0x3, 0x7, 0x7ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x92dd, 0x7f, 0x0, 0x4, 0xc}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0xaf, 0x6, "a844397915f9f5045642d300382ccded3434193fc9078e8a49b8743f65ee8006a51a9fab522fb1b45d62e7460e9c96e62a8550aba323b7514431ac4c4ec4cf8d65e3ae134eef70d074e21f8ee178662d34a2825fce237bd62a48374f0c9e545a5ffb9b13c7e18c78a4921b51fe8d33a848465f60366f3a07f60ab68891ce4f139005e32d8d61f70383d0fc911c3b7f06bb7fe739d4a29360815a70a5edbd9bee8247691c313a95a079eef6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x158, 0x15, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xbc6, 0x10000000, 0xe, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x32, 0x8a80, 0x1000000d, 0x10000, 0x4}}]}, {0xfb, 0x6, "cf16a097937040a5f570798e45baa268d5afb5c60cccaf1cbd7e225d0383f483fd09afc02da0ea5f8f55510709f6a2fb1f57b35cd40e593277e575b71576913a89e39847e82f1cb48338f9a2e7ef43ca207199f4071da417df6d5484c73b61944fa0103cd3f6a9245e0b01806be82e4c1cc660b72bef42749ec8f52f8262cf01b441f727632d4dc69e0e9b3370c02ea660ae5a1f2097c1acb0b06f1764f004000b8bb1b8f9e29febcdb9c93a130af25a00c950700c38c4790c9692f98d282a2b04f871a6bc47b23ea0dfcc5c970cc6a550911aac1d163a5ac07a1c330e3e84bd64cf46c6c7c19cbe5d262a36021374a7379f8566a5e4ec"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe4, 0x1e, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}]}, {0xab, 0x6, "49ddf6db27ec45e790ed4e233a0670bf6f89b5f7290ae93e6287db6fe334ec5704cf355166b657c47957c8473b97be98b67487af591f2e761f810af713cedb76638a7710c583f49459ad4e1098199e1f78bab2dc9f089c5623ff4115a72a873fc68c122c339356a3667ff7f81bebb766211a7895ce5a9e41bddd0f2d4cc4bc4c0a109b0f957fcf0beff371991b9ff61454fdcd17e99fe7f4ed2663e3783680454a8dc8501bb4ae"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_ACT={0x1600, 0x7, [@m_ife={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xb}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0xa398}]}, {0xae, 0x6, "f784b908e05b160ae1994c64d6e46c0685966879e0c8a3b3e0c6f60ed1b3960af43bbf3750858640b4c44da1cd6e2f0956329dcd885ec00a96d766706f7fa183afc836de97723866016e384e452835395cb8d6f537fbfa31680f6110cf797624fe8159e1c74b223bec02f11369f106783328fe75d4cec8931cfb5e137d5be666a765e0c1485909ac94d932e18991b219e5e8bc82aee1eecc6ed4706780147778b04ac90ac1cd835f10e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd4, 0x12, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x7, 0x4, 0x8, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x800}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x83b}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x9, 0x1, 0x1, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xee, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd6d2}]}, {0x37, 0x6, "28019d8af638ea4b6350942c79532f7d19a567bb55183b4dc08c38e716799f755ffc75c07e03063618dae19eee2d94a14e297b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x140, 0x11, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "50ea24cb057c34f97d42c566e40385e0"}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x130, 0x1e, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_LABELS_MASK={0x14, 0x8, "159c8e65841af173136073ccae385e8b"}]}, {0xeb, 0x6, "6b85f7247e48c4c554225e9f4423dc9c2179a30a8f0b597b243b480cb5dc7e6434bd944d162ef793101ca63fb0f8c12b16cb99089e11b2355a71ad839ccb0ffa518633bb9490e4c660fc8d4a1f1ca3dba0dc3df0125547a96a4b8e8820da9721d82dcb25e7938f3538c746696297b60617b27d8a43562d0f97a80fe47ecb4cc427f48dc90f182142cafc3130d2123f99c5ca8d141afbad51dfb39b47843a7416aef0b2e42b043a01a3c1e93e8e38556a59c8487fffb3064a2acaccc31b04b83c87f322b9e16899a7fe97c4e64d1c4c91600774ec7779c9d752a0a6831fb4fdaedcbb1b7ae86743"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x128, 0x18, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0xec, 0x6, "f682097eca6377a4b426702289bdb2f47c1cd322f273b67d2cd015f67764939e2b42ca71f917fc7e65a96ca3938de5c2c96c1138f83a8234afe4662f919170e4c2536a8ddd4537449a57ef689c91eb729370aee669fed84e75f0423fd75713d0b95a76c6d71f263d0052cbbc5e5d2a76b9e14b4e957890e03d7ebc832c5a72c646acd8a9109673ebb777476f45579a2f22262affc1f0e36ca427e65aa21a0639fba218e8209e56f0b8e7680a4786209424bde3e7d641f96ffc3e6344884ec1906308e9993043ce7a4c2eb4ecf351743ec680acc3813b4bf626a6a7d195a61244a7c983c4830f87c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x1074, 0xd, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xa4a6, 0x4, 0xfd84, 0x1}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}]}, 0x40b0}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) getsockopt(r7, 0xb7, 0xc013, &(0x7f0000000340)=""/233, &(0x7f0000000440)=0xe9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) 762.940252ms ago: executing program 4 (id=3418): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02044c000c000000070000000400000002000100000000030000a80200000000080012"], 0x62}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x58}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010070bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db24d36ea1c0136"], 0x20}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000001) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="e745f18d06aacbdc095fa1123f3b56cd27923f549fcd05880614dc", 0x1b}, {&(0x7f0000000400)="477dea6368439281d69c756a5b348d95ebebcf817649b00f31596b0e15b5ae014c1acbc0214f31da784334420b87405f84aa86608a06287038a21add7d65802f1a56e048583f5f6fcbe603a02e5b3b21d646ce45c30b06c6ae74ace15821b24fba3d3f3e24aac6b7275c14aed457a5b77a9178d66a8cd61e6caca4dfd6d78a9c883b8b9ea4f98f76522cd172732410d34ed9cec6ba6c81b81bf31bdaa8e9ff52c53610a4b1f799959005ab94dac6206253e04e4249bab63c75e88c8be247d91f3f2802b861a29b8fdae010666471ad29fe07f2b6468e2c85d765e1e037a09992424ab74ec108a97327", 0xe9}, {&(0x7f0000000340)="ccc3238c0d691cd0785c9e0d1e428fc324d0edf7222d6cf11d89bad0206261c0f054a6db0ef864a582d0c1b300ca3d35d010758da9d9bdc8d7d03bc703aa4c084a86a431db1c8a2ea845aec27f3aef43625c69bbe7b84eeb1d2a51b3de323e7bc916a35917bc68b28ae5", 0x6a}], 0x3}, 0x2400c040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x10000006}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x6, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0xa61f, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x100400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0xa, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500200012800800010067747000140002800800030001000700080001"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip6gre0\x00', 0x10) 629.122029ms ago: executing program 1 (id=3419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000000ee000095", @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0xf8, 0x24, 0x400, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x8, 0xfff1}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0xfffffffe, 0x4}}}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xff, 0xea3, 0x80, 0x1, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0x6, 0x236, 0x157, 0x2, 0x0, 0x7f, 0x7f, 0x0]}}, {{0x1c, 0x1, {0xf, 0xa, 0x7, 0xe6f, 0x1, 0x1ff, 0xc, 0x4}}, {0x0, 0x2, [0x400, 0x2010, 0x3, 0xb]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8, 0x9, 0x0, 0x81, 0x4, 0x5}}, {0xe, 0x2, [0x3, 0x8000, 0x1ff, 0x6f9, 0x2]}}, {{0x1c, 0x1, {0x7, 0x5, 0x1, 0x7, 0x1, 0x101, 0xe48, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0xb}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xfffffffb, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20048817) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000120000007f00000001", @ANYRES16=r8, @ANYRES32=r8], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=@tcp6=r9, 0x2}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200), 0xffffffc1) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r12, 0x0) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (rerun: 64) 546.012628ms ago: executing program 5 (id=3420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x49, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 476.860678ms ago: executing program 4 (id=3421): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x1, 0x8, {{0x2e, 0x4, 0x0, 0x30, 0xb8, 0x67, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0xa0a9a7550a92d4ee, 0x11, "0a3abbb2c5fa281a633f227451f769"}, @ssrr={0x89, 0x17, 0xd3, [@private=0xa010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @remote]}, @lsrr={0x83, 0x23, 0x71, [@local, @remote, @broadcast, @private=0xa010102, @empty, @broadcast, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x6, [{@broadcast, 0xa}, {@private=0xa010102, 0xe}, {@loopback}]}, @ssrr={0x89, 0x23, 0xa7, [@empty, @rand_addr=0x64010102, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @local, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x18, 0x0, [{0x7, 0x12, "556c1f804c9cd7ce20e2b9238ea9c5c8"}]}]}}}}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6, @random="01db2f72275c"}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000006c0)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x8, 0xfffffffffffffffc}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x4, 0xb, 0x3, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0x800a, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r4, 0x0, r5, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x1}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x2e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c000000000011907864010101ac1400004e2200489078030000000100000091eb4befe5f777f480b1a32a45146e907d0e5cc74505e939e5b5cfae73a19982412a3b46ec83580e226806224a9529f2259dfd49766c5f14"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x140d, 0x200, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044094}, 0x8004) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 393.837092ms ago: executing program 1 (id=3422): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[], 0x20}, 0x20000890) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x230}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f0000000000)='j{:-.(\'{&-#%\'\x00', 0x1000, &(0x7f0000000040)={@_ha_fsid={[0x9b32, 0x100]}, {0x5, 0x6, 0xfff, 0x5}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000240)=0x9}, {[0x6, 0x4, 0xfff, 0x1]}, 0x1, 0xc4, &(0x7f0000000500)=""/196}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49b5f8fff0ff4eed9e03fab4eb18fffffffffffffffaff4cc29263f021605d85"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8181, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'veth1_to_team\x00', 0x100}) 391.442643ms ago: executing program 2 (id=3423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x2, 0x6}, 0x8) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x10}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x3, 0x73, 0x0, 0x0, 0x10000000}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400b5a000000000000000000a"], 0x34}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0xffffffff, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet(0x2, 0x2, 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket(0x2, 0x3, 0x100000001) setsockopt(r10, 0xff, 0xffffffc0, 0x0, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r9, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1a000}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000084e0000007000000ac1414bb00000800"], 0x18}], 0x1, 0x0) 384.130119ms ago: executing program 6 (id=3424): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x5, 0x18}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x8001, 0x3, 0x1, 0x0, r0, 0x729, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300)={@initdev, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xfb, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xfb, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000740)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x2f8d95cbd170c3a, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], &(0x7f0000000840)='GPL\x00', 0x3, 0xaf, &(0x7f0000000880)=""/175, 0x40e00, 0x8, '\x00', r1, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x3, 0x9c3}, 0x10, 0x2a5e, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r0, r2, r2], &(0x7f0000000a00)=[{0x3, 0x1, 0xd, 0x3}], 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x3, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0x3b91cb66, 0x0, 0x0, 0x41100, 0x2a, '\x00', r5, @fallback=0x13, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0x9, 0x800}, 0x10, r8, r9, 0x3, &(0x7f0000000b00)=[r2, r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000b40)=[{0x1, 0x4, 0x0, 0x7}, {0x5, 0x2, 0x5, 0x8}, {0x3, 0x5, 0x9, 0xb}], 0x10, 0x500}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x3, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0x3b91cb66, 0x0, 0x0, 0x41100, 0x2a, '\x00', r5, @fallback=0x13, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0x9, 0x800}, 0x10, r8, r9, 0x3, &(0x7f0000000b00)=[r2, r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000b40)=[{0x1, 0x4, 0x0, 0x7}, {0x5, 0x2, 0x5, 0x8}, {0x3, 0x5, 0x9, 0xb}], 0x10, 0x500}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f00)={&(0x7f0000000c40)="522c935a8bd72801664780167b88ac48dc8f942c3e71b45f4ff3d18fb4d67b8e863219c2b5ba38f19a3d0151bc9141b58e111a59a5e75f1126cf7ba0c0a49e96ad111845db402a90b1bf35ebdb8b5aa9490db0e9107fdd5c00b86c76d3f28072ca1d6654160520c70f875dc7eaa4e92fde3d0815ea", &(0x7f0000000cc0)=""/215, &(0x7f0000000dc0)="e8d74b3e8a444158bb1bdb575603775811f2a198e725e03e890de224d5040a9c97a8cb4f3f286532986d4fe8ad7c5e2b8732494cf98d06d7860af7da1409459fe653954337835df9f65a7c7a5e8905ee62f6ae04d80122b0c4ea10b7ff488af3fd102ec54f01853fc616b7d35afa522ed2d0e19d6b3c0e0e45289c53b4c95c162beaec22", &(0x7f0000000e80)="3fbb8bf252132265be72fe32177303e0c297f73b1e0868d1f9599d2024f6438ed8f1e7b3f5d01e6e7fe0d98f52a3b15265b8ae08f8714a1cda10ed7bb056f774998580db4cd8801c1e2b1c26437d4fd9d3178c9fea492daae4cee8444594030c2fbca5afd8efa5bb490e38fb960177bc05aa469f402b5d84b15fe5294011b9", 0x6, r2}, 0x38) r11 = openat$cgroup_ro(r10, &(0x7f0000000f40)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0xb, 0x0, r0, 0x8, '\x00', r7, r6, 0x1, 0x4}, 0x50) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000001000)={r12}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r12, &(0x7f0000001040)="eb1480ea0b23e12a3cb76ac80c903fa47905355ff0c1f6582e83c087d411f9fe4f13a9d97ab62cca3c9b7bcc4f4b36689be9da2f7e57828803e7ff4c2f568b2be2c49155ff0eaedd0483c94b32939b96a9e2345feeb4a15091aec06056948c222397396e2d5a0f27e2774afde5b38a1c33907fbb657f90db695ed56df127dece23d3be16c7592783f894245a593178e71ba67b8109242a1346299de39ef415e819d7a077171ffc7ded3d05ce249632bbd4b8a72d47cfe3b3c3027227fa5a358d47ae970c82981f6b16913fc4f0b95c786e684df8441eb526855553", &(0x7f0000001140)=@tcp=r13, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.net/syz1\x00', 0x1ff) r14 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r14, 0x80044943, &(0x7f0000001200)) getsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000001240)=0x463, &(0x7f0000001280)=0x2) (async) getsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000001240)=0x463, &(0x7f0000001280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001300)=@generic={&(0x7f00000012c0)='./file0\x00', r2}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001300)=@generic={&(0x7f00000012c0)='./file0\x00', r2}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000001340)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'syztnl1\x00', r5, 0x2f, 0x8, 0x1, 0x80000001, 0x24, @loopback, @mcast2, 0xa5709057a3944cdc, 0x7800, 0x6, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'syztnl1\x00', r5, 0x2f, 0x8, 0x1, 0x80000001, 0x24, @loopback, @mcast2, 0xa5709057a3944cdc, 0x7800, 0x6, 0x2}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r11, 0xc058671e, &(0x7f0000001640)={{'\x00', 0x3}, {0x5}, 0x10, 0x0, 0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)="503a6ceef2b88e9122e0c138efb046d1a629c4eaaf15314891a6a6a9d98d68eceed175773b49afa9340578a825deb73673dc04a6b24609b37e3a0635b908d6", 0x3f, 0x0, &(0x7f0000001540)={0x2, 0x68, {0x1, 0xc, 0x19, "0f56b5722b5b584cab5ca3e3154dd13a8a947fabc0baeac9d5", 0x42, "1f4ecfe8220282a9c7ef4280e7ec63f6677ad6bba323bb67f1ea30bd5a237a8a453e3a5d98decb24420cfbfd44072c3b672a0c8b40297c5f89ad8b0257bded7fa4ac"}, 0x6a, "ed9166ea8de211dc707a79dae45ad402d84eed67c9102fa76fc3a1f32549c9c78545e6f5c2f6909e1975cd609bd412584da0f1362b6962f2d41d3458aaf54eacbbc344ff067e8c4d1ab406abaf2fb7c0a13617f119833431f154d7cb3af795c96e5d6264a00ce3537e2f"}, 0xde}) (async) ioctl$INCFS_IOC_CREATE_FILE(r11, 0xc058671e, &(0x7f0000001640)={{'\x00', 0x3}, {0x5}, 0x10, 0x0, 0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)="503a6ceef2b88e9122e0c138efb046d1a629c4eaaf15314891a6a6a9d98d68eceed175773b49afa9340578a825deb73673dc04a6b24609b37e3a0635b908d6", 0x3f, 0x0, &(0x7f0000001540)={0x2, 0x68, {0x1, 0xc, 0x19, "0f56b5722b5b584cab5ca3e3154dd13a8a947fabc0baeac9d5", 0x42, "1f4ecfe8220282a9c7ef4280e7ec63f6677ad6bba323bb67f1ea30bd5a237a8a453e3a5d98decb24420cfbfd44072c3b672a0c8b40297c5f89ad8b0257bded7fa4ac"}, 0x6a, "ed9166ea8de211dc707a79dae45ad402d84eed67c9102fa76fc3a1f32549c9c78545e6f5c2f6909e1975cd609bd412584da0f1362b6962f2d41d3458aaf54eacbbc344ff067e8c4d1ab406abaf2fb7c0a13617f119833431f154d7cb3af795c96e5d6264a00ce3537e2f"}, 0xde}) accept(r14, &(0x7f00000016c0)=@isdn, &(0x7f0000001740)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000017c0)={'erspan0\x00', &(0x7f0000001780)={'sit0\x00', r15, 0x8, 0x0, 0x8, 0x7, {{0x8, 0x4, 0x2, 0x11, 0x20, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x9, [{@remote, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000017c0)={'erspan0\x00', &(0x7f0000001780)={'sit0\x00', r15, 0x8, 0x0, 0x8, 0x7, {{0x8, 0x4, 0x2, 0x11, 0x20, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x9, [{@remote, 0x7}]}]}}}}}) 303.114755ms ago: executing program 4 (id=3425): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) ioctl$sock_ifreq(r2, 0xf65f5f175b9feb95, &(0x7f0000000180)={'veth0_macvtap\x00', @ifru_addrs=@hci={0x1f, 0xffffffffffffffff, 0x4}}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0) 105.474975ms ago: executing program 6 (id=3426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000c80)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x3, 0xe9, 0x100, 0x4000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x3}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x12, 0x2000}, 0x20) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = socket(0x11, 0x3, 0xd) accept4$unix(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0xb, &(0x7f0000001b00), &(0x7f0000000480)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="bc0700001500000229bd7000fcdbdf251600000070253b1c26d8f7ed7f47759522acb5485f5ea3874bcc10fa20e812920798dbbfece51454c598072a3ae535ac2d5d3f70e64f25ce5d089f933a0b74f94c351add186a5e0b7866d2963f3353eefd5ad7edef7540a271d358d620f8d531b0dddeb3c42c98808694e71e10a73c56ea6b38a00c60e49c8e6c8c1a720fa2cb7bed93518dd7078898be12d246d4a531dc083cceb52a558e31d3cde84ea9a448d27b31b9ea22f0f1034ebba087668d5c92dcc7819432f613784ef8272cfc3f3c3a738b19b123c411e4a24a3744372565b198ef784626a8cc32908748bc3093b29bc38899d4ea7ca81295e5cd7eb1d57300f8c0195a9fb1110eb7c9e14b9385684ed73ad6c1256749967bc6c98491e753f0912ec97c581cf88802eb09275cb093fb7ba194a4ac0a5c122ed4622431a793d231150bb5bcf1acf083d0584a7e7c9e2c73cd038ef160e461e11b50491557efccab53c65c8a89e93f937dc6f9de8689a3238b3de4c9fc822c63690fa767fb820302a1540538885738b218e6ebafe1018780f32769c078fd9eabe0279c210cf4135fbfc5075fc9885d57a3c3358549af872068237c8259db5e7eff47013e79959306081e38706506dcd0f082ce75c2c35ca9c5c85bac8e9d5e9da7c1d1c08926f85d718b38950e1c1d01b1e286b35b5026b53d90f64c6e4d91103799192da77b9de1b89e3da83acdfa941b1a2d807a23e342241790b6360818e3b3de5b07736940c7e6aeed328d1657794439d5e13ea26c964e10d0548922fe75eedb67c58713549718c01e3ee4c171174b14b5710e965c3c013308531a0e1fb56c1e39b8b535695bc456e660f1e770ed348176698609130800be", @ANYRES32=r9, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r10, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x31, '\x00', r8, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xffffffffffffffe2}]}, 0x28}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000008c0), 0x1003, r13}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r13, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000840), &(0x7f0000000880)=0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x964, 0xbb, &(0x7f0000000280)=""/187, 0x40f00, 0x1, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xc, 0x7, 0x2b}, 0x10, 0xe79, r1, 0x6, &(0x7f0000000340)=[r1, r11], &(0x7f0000000380)=[{0x3, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xf, 0x1}, {0x0, 0x4, 0xa, 0x2}, {0x4, 0x2, 0xb, 0x6}, {0x4, 0x2, 0x0, 0x5}, {0x5, 0x1, 0x10, 0x2}], 0x10, 0xe}, 0x94) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000008c0)={0x100000000, 0x8, 0x1, 0xffff, 0x2, [0x8, 0x9, 0x6, 0x5]}) 95.858447ms ago: executing program 5 (id=3427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x67}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000280), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@bridge_dellink={0x24, 0x13, 0x1, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, r5, 0x480, 0x40000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) 94.177817ms ago: executing program 1 (id=3428): r0 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) getsockname$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r5, 0x100000af5, 0x0) close(r2) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f00000001c0)="7a94f437cab4062f66da986722c93496247284a50474538a5759ce9c", 0x1c}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00ffdbe425d13daf780000000000000000000000f1a959", @ANYRES32=0x0, @ANYBLOB="08000100feffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, &(0x7f0000000040)='\x00', 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 0s ago: executing program 4 (id=3429): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000000280)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20010004}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) socket$inet_udp(0x2, 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r14 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r13, 0x0, 0x20008004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000530000000400000002"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 729][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 345.385674][T14904] netlink: 'syz.5.2146': attribute type 1 has an invalid length. [ 345.411302][T14903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.485477][T14904] bond10: entered promiscuous mode [ 345.494347][T14912] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 345.508813][T14904] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.574912][T14912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2148'. [ 345.664978][T14914] bond10: (slave veth15): making interface the new active one [ 345.688561][T14914] veth15: entered promiscuous mode [ 345.699984][T14914] bond10: (slave veth15): Enslaving as an active interface with an up link [ 346.208476][T14941] netlink: 'syz.1.2154': attribute type 3 has an invalid length. [ 346.277497][T14943] netlink: 'syz.1.2154': attribute type 3 has an invalid length. [ 346.397311][ T5891] udevd[5891]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 346.424061][T14951] netlink: 'syz.3.2155': attribute type 3 has an invalid length. [ 346.615284][T14969] __nla_validate_parse: 2 callbacks suppressed [ 346.615309][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'. [ 346.658542][T14972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2162'. [ 346.673726][T14968] ±ÿ speed is unknown, defaulting to 1000 [ 346.802096][T14978] syzkaller0: entered promiscuous mode [ 346.808424][T14978] syzkaller0: entered allmulticast mode [ 346.866221][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 346.877323][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2165'. [ 346.889012][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 347.248124][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 347.258775][ C0] lec:lec_tx_timeout: lec0 [ 347.264357][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.606139][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 347.902982][T15017] bond5: option lacp_active: invalid value (8) [ 347.922340][T15017] bond5 (unregistering): Released all slaves [ 348.040681][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 348.365895][T15029] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2175'. [ 348.646068][T15049] netlink: 'syz.4.2180': attribute type 3 has an invalid length. [ 349.685155][T15086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.944639][T15100] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2190'. [ 350.140606][T15109] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2191'. [ 351.367259][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.676019][T15167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.174972][T15185] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 352.241451][T15185] bond0 (unregistering): Released all slaves [ 352.414730][T15198] __nla_validate_parse: 8 callbacks suppressed [ 352.414752][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 352.461100][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 352.851249][T15221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2219'. [ 352.890280][T15222] openvswitch: netlink: IP tunnel dst address not specified [ 353.007745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 353.015913][ C0] lec:lec_tx_timeout: lec0 [ 353.021479][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 353.109235][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 353.701199][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 353.982126][T15281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.935208][T15307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2243'. [ 355.108191][T15312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2244'. [ 355.222685][T15314] x_tables: duplicate underflow at hook 3 [ 355.577986][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2250'. [ 355.611668][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 355.641933][T15331] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2250'. [ 355.656245][T15331] netlink: 'syz.1.2250': attribute type 3 has an invalid length. [ 355.666834][T15331] netlink: 'syz.1.2250': attribute type 2 has an invalid length. [ 355.677592][T15331] netlink: 'syz.1.2250': attribute type 2 has an invalid length. [ 356.172416][T15346] syzkaller1: entered promiscuous mode [ 356.197938][T15346] syzkaller1: entered allmulticast mode [ 356.556584][T15358] syzkaller0: entered promiscuous mode [ 356.573389][T15358] syzkaller0: entered allmulticast mode [ 356.585042][T15364] netlink: 'syz.4.2263': attribute type 5 has an invalid length. [ 356.692945][T15366] syzkaller0: entered promiscuous mode [ 356.718133][T15366] syzkaller0: entered allmulticast mode [ 357.134827][T15382] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 357.820689][T15411] __nla_validate_parse: 8 callbacks suppressed [ 357.820714][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 357.870038][T15414] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2277'. [ 357.898058][T15411] openvswitch: netlink: Flow key attr not present in new flow. [ 357.995216][T15418] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2279'. [ 358.027855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 358.038637][ C0] lec:lec_tx_timeout: lec0 [ 358.043654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 358.341480][T15416] team0 (unregistering): Port device team_slave_0 removed [ 358.351776][T15416] team0 (unregistering): Port device team_slave_1 removed [ 359.059095][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'. [ 359.374869][T15448] bond0: (slave vcan1): refused to change device type [ 359.446876][T15454] tap0: tun_chr_ioctl cmd 21731 [ 359.453496][T15455] tap0: tun_chr_ioctl cmd 21731 [ 360.198106][T15482] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2290'. [ 360.411892][T15475] syzkaller0: entered promiscuous mode [ 360.437929][T15475] syzkaller0: entered allmulticast mode [ 360.792521][T15508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.884395][T15510] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2296'. [ 362.760098][T15515] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 362.880854][T15517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2300'. [ 363.057883][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 363.066162][ C0] lec:lec_tx_timeout: lec0 [ 363.071405][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 363.135116][T15516] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.190319][T15516] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 363.297031][T15517] bond9: (slave bridge2): Enslaving as an active interface with a down link [ 363.338709][T15518] macvlan2: entered promiscuous mode [ 363.354872][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 363.360552][T15518] macvlan2: entered allmulticast mode [ 363.379078][T15518] bond9: entered promiscuous mode [ 363.391997][T15518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.425562][T15518] bond9: left promiscuous mode [ 363.785649][T15551] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2308'. [ 363.833027][T15556] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2310'. [ 363.845888][T15556] syzkaller0: entered promiscuous mode [ 363.853310][T15556] syzkaller0: entered allmulticast mode [ 363.870964][T15551] syzkaller1: entered promiscuous mode [ 363.877516][T15551] syzkaller1: entered allmulticast mode [ 364.042493][T15565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2312'. [ 364.063259][T15565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2312'. [ 364.338730][T15585] netlink: 'syz.1.2316': attribute type 8 has an invalid length. [ 364.378343][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 364.440154][T15590] ip6tnl0: Caught tx_queue_len zero misconfig [ 364.726688][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2324'. [ 364.740972][T15605] syzkaller0: entered promiscuous mode [ 364.746847][T15605] syzkaller0: entered allmulticast mode [ 364.915792][T15615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2326'. [ 364.937553][T15615] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 364.978469][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 365.033302][T15617] veth1: Caught tx_queue_len zero misconfig [ 365.743881][T15619] wg1: left promiscuous mode [ 365.754190][T15619] wg1: left allmulticast mode [ 365.832511][T15619] xfrm0: left promiscuous mode [ 365.847912][T15619] xfrm0: left allmulticast mode [ 366.028060][T15619] ipvlan2: left promiscuous mode [ 366.121599][T15619] bond3: left promiscuous mode [ 366.140389][T15619] vlan3: left allmulticast mode [ 366.158855][T15619] macvtap0: left allmulticast mode [ 366.227397][T15619] bond7: left promiscuous mode [ 366.258825][T15619] ip6gretap2: left allmulticast mode [ 366.349519][ T6601] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.359576][ T6601] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.410579][ T6601] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.475811][ T6601] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.536805][T15648] syzkaller1: entered promiscuous mode [ 366.569138][T15648] syzkaller1: entered allmulticast mode [ 366.778799][T15657] ±ÿ speed is unknown, defaulting to 1000 [ 366.969823][T15666] syzkaller0: entered promiscuous mode [ 366.988279][T15666] syzkaller0: entered allmulticast mode [ 367.551479][T15682] bond11: Removing last arp target with arp_interval on [ 367.745837][T15703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.797645][T15710] vlan4: left promiscuous mode [ 367.807229][T15710] bridge0: port 4(vlan4) entered disabled state [ 367.872369][T15710] hsr0: left allmulticast mode [ 367.882965][T15710] hsr_slave_0: left allmulticast mode [ 367.911352][T15710] hsr_slave_1: left allmulticast mode [ 367.926119][T15710] bridge0: port 3(hsr0) entered disabled state [ 368.002835][T15710] bridge_slave_1: left allmulticast mode [ 368.009614][T15710] bridge_slave_1: left promiscuous mode [ 368.029040][T15724] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 368.037338][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.088020][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 368.097424][ C0] lec:lec_tx_timeout: lec0 [ 368.102894][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 368.182699][T15710] bridge_slave_0: left promiscuous mode [ 368.208862][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.518461][T15733] __nla_validate_parse: 5 callbacks suppressed [ 368.518483][T15733] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2352'. [ 368.758751][T15747] syzkaller0: entered promiscuous mode [ 368.764807][T15747] syzkaller0: entered allmulticast mode [ 368.843658][T15766] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 369.029084][T15772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'. [ 369.049289][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2358'. [ 371.788969][T15766] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 371.859195][T15794] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 372.088842][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.387489][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 372.471318][T15834] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2373'. [ 372.489698][T15833] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2374'. [ 372.514380][T15833] syzkaller0: entered promiscuous mode [ 372.521553][T15833] syzkaller0: entered allmulticast mode [ 372.870283][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2379'. [ 372.879393][T15845] bond0: Unable to set up delay as MII monitoring is disabled [ 373.167004][T15859] syzkaller1: entered promiscuous mode [ 373.186516][T15859] syzkaller1: entered allmulticast mode [ 373.475279][T15876] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2386'. [ 373.485297][T15876] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2386'. [ 373.887729][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 373.895990][ C0] lec:lec_tx_timeout: lec0 [ 373.901652][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 373.924553][T15895] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2389'. [ 374.079571][T15900] tipc: Resetting bearer [ 374.269094][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2394'. [ 374.484919][T15925] netlink: 'syz.5.2398': attribute type 1 has an invalid length. [ 374.574289][T15928] netlink: 'syz.2.2399': attribute type 12 has an invalid length. [ 374.594547][T15932] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.2396'. [ 374.651274][T15935] openvswitch: netlink: Actions may not be safe on all matching packets [ 374.675444][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 374.688985][T15936] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'. [ 374.740192][T15933] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 374.899344][T15941] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2402'. [ 375.113222][T15945] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2403'. [ 375.389412][T15952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2405'. [ 375.624697][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 375.728437][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 375.800523][T15955] syzkaller0: entered promiscuous mode [ 375.816820][T15955] syzkaller0: entered allmulticast mode [ 376.083926][T15965] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 376.405647][T15962] infiniband syz1: set down [ 376.410628][T15962] infiniband syz1: added bond0 [ 376.468127][T15962] RDS/IB: syz1: added [ 376.473537][T15962] smc: adding ib device syz1 with port count 1 [ 376.482029][T15962] smc: ib device syz1 port 1 has no pnetid [ 376.568832][T15985] SET target dimension over the limit! [ 378.937772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 378.946020][ C0] lec:lec_tx_timeout: lec0 [ 378.950761][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.371539][T16008] __nla_validate_parse: 4 callbacks suppressed [ 379.371562][T16008] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2422'. [ 379.543111][T16030] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2426'. [ 379.568134][T16030] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2426'. [ 379.721175][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2429'. [ 380.012249][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 380.180390][T16072] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2431'. [ 380.326319][T16077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.777569][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 380.875732][T16094] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 381.065698][T16095] IPVS: stopping backup sync thread 11893 ... [ 381.271154][T16115] pim6reg: entered allmulticast mode [ 381.284299][T16115] pim6reg: left allmulticast mode [ 381.336434][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 381.451098][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.467138][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.487579][T16117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.514912][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 381.531363][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 381.664726][T16127] netlink: 'syz.2.2449': attribute type 5 has an invalid length. [ 381.821147][T16133] tipc: Failed to remove unknown binding: 66,0,0/0:711768467/711768469 [ 381.834698][T16133] tipc: Failed to remove unknown binding: 66,0,0/0:711768467/711768468 [ 381.854419][T16133] tipc: Failed to remove unknown binding: 66,0,0/0:711768467/711768469 [ 381.874814][T16133] tipc: Failed to remove unknown binding: 66,0,0/0:711768467/711768468 [ 382.168879][T16140] nbd2: detected capacity change from 0 to 63 [ 382.199507][ T5844] block nbd2: Receive control failed (result -32) [ 382.262464][T16150] block nbd2: Dead connection, failed to find a fallback [ 382.309864][T16150] block nbd2: shutting down sockets [ 382.337549][T16150] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.361190][T16150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 382.399367][T16150] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.416595][T16150] Buffer I/O error on dev nbd2, logical block 1, async page read [ 382.425399][T16150] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.435712][T16150] Buffer I/O error on dev nbd2, logical block 2, async page read [ 382.486595][T16150] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.502410][T16150] Buffer I/O error on dev nbd2, logical block 3, async page read [ 382.520414][T16150] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.545833][T16150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 382.595288][T16150] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.615265][T16150] Buffer I/O error on dev nbd2, logical block 1, async page read [ 382.632204][T16150] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.641514][T16161] netlink: 'syz.3.2461': attribute type 11 has an invalid length. [ 382.646312][T16150] Buffer I/O error on dev nbd2, logical block 2, async page read [ 382.676067][T16150] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.722207][T16150] Buffer I/O error on dev nbd2, logical block 3, async page read [ 382.741536][T16150] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.761916][T16150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 382.818876][T16150] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.859501][T16150] Buffer I/O error on dev nbd2, logical block 1, async page read [ 382.878520][T16150] ldm_validate_partition_table(): Disk read failed. [ 382.897037][T16150] Dev nbd2: unable to read RDB block 0 [ 382.904206][T16150] nbd2: unable to read partition table [ 382.910270][T16171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.949605][T16150] ldm_validate_partition_table(): Disk read failed. [ 382.956831][T16150] Dev nbd2: unable to read RDB block 0 [ 382.979962][T16150] nbd2: unable to read partition table [ 383.040900][T16174] bond10 (unregistering): Released all slaves [ 383.278537][T16185] sctp: [Deprecated]: syz.5.2467 (pid 16185) Use of int in maxseg socket option. [ 383.278537][T16185] Use struct sctp_assoc_value instead [ 383.294787][T16185] Cannot find add_set index 3 as target [ 383.957766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 383.965949][ C0] lec:lec_tx_timeout: lec0 [ 383.970943][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 385.561790][T16198] batman_adv: batadv0: Adding interface: ipvlan3 [ 385.575773][T16198] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.602356][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.613279][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.623688][T16198] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 385.717918][T16165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.901444][T16204] __nla_validate_parse: 7 callbacks suppressed [ 385.901469][T16204] netlink: 211280 bytes leftover after parsing attributes in process `syz.1.2474'. [ 385.918636][T16206] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 385.955723][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 386.096901][T16212] xt_CT: No such helper "netbios-ns" [ 386.121598][T16206] team0 (unregistering): Port device C removed [ 386.168649][T16206] team0 (unregistering): Port device team_slave_1 removed [ 386.174511][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 386.347946][T16230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.425788][T16222] ±ÿ speed is unknown, defaulting to 1000 [ 386.455034][T16230] netlink: 'syz.2.2480': attribute type 2 has an invalid length. [ 386.543188][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 386.694459][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 387.157597][T16260] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 387.318422][T16262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2486'. [ 387.358648][T16265] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 387.542118][T16268] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 388.315653][T16270] dummy0: left promiscuous mode [ 388.320880][T16270] team0: left allmulticast mode [ 388.325837][T16270] dummy0: left allmulticast mode [ 388.372326][T16270] batadv0: left promiscuous mode [ 388.377353][T16270] batadv0: left allmulticast mode [ 388.977794][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 388.981113][T16270] gtp0: left promiscuous mode [ 388.986100][ C0] lec:lec_tx_timeout: lec0 [ 388.995257][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 389.008569][T16270] gtp0: left allmulticast mode [ 389.019131][T16270] geneve2: left promiscuous mode [ 389.044170][T16270] bond1: left promiscuous mode [ 389.057880][T16270] bridge1: left promiscuous mode [ 389.147125][T16270] veth11: left promiscuous mode [ 389.155284][T16270] bridge3: left allmulticast mode [ 389.169537][T16270] bond7: left promiscuous mode [ 389.194639][T16270] vlan0: left allmulticast mode [ 389.207855][T16270] bond8: left allmulticast mode [ 389.213129][T16270] geneve3: left allmulticast mode [ 389.224000][T16270] bond10: left promiscuous mode [ 389.229223][T16270] veth15: left promiscuous mode [ 389.364835][ T6583] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.420331][ T6583] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.469831][ T6583] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.488828][ T6583] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.537340][T16282] FAULT_INJECTION: forcing a failure. [ 389.537340][T16282] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 389.572851][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.4.2492 Not tainted syzkaller #0 PREEMPT(full) [ 389.572884][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.572902][T16282] Call Trace: [ 389.572911][T16282] [ 389.572952][T16282] dump_stack_lvl+0xe8/0x150 [ 389.573153][T16282] should_fail_ex+0x412/0x560 [ 389.573292][T16282] _copy_from_user+0x2d/0xb0 [ 389.573434][T16282] ___sys_sendmsg+0x1c6/0x360 [ 389.573563][T16282] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.573645][T16282] ? __fget_files+0x2a/0x420 [ 389.573690][T16282] ? __fget_files+0x3a0/0x420 [ 389.573721][T16282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 389.573759][T16282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.573803][T16282] ? __pfx_ksys_write+0x10/0x10 [ 389.573847][T16282] do_syscall_64+0x14d/0xf80 [ 389.573954][T16282] ? trace_irq_disable+0x3b/0x150 [ 389.573999][T16282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.574036][T16282] ? clear_bhb_loop+0x40/0x90 [ 389.574063][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.574090][T16282] RIP: 0033:0x7ff60cb9c819 [ 389.574112][T16282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.574132][T16282] RSP: 002b:00007ff60d973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.574156][T16282] RAX: ffffffffffffffda RBX: 00007ff60ce15fa0 RCX: 00007ff60cb9c819 [ 389.574172][T16282] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 389.574186][T16282] RBP: 00007ff60d973090 R08: 0000000000000000 R09: 0000000000000000 [ 389.574199][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.574212][T16282] R13: 00007ff60ce16038 R14: 00007ff60ce15fa0 R15: 00007fff240a5328 [ 389.574246][T16282] [ 389.780775][T16245] mpoa:mpoad_close: () going down [ 389.931971][T16287] lo: entered allmulticast mode [ 389.937384][T16287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.040839][T16294] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2497'. [ 390.224645][T16302] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2500'. [ 390.245702][T16302] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2500'. [ 390.354310][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2503'. [ 390.384237][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 390.443117][T16316] netlink: 'syz.3.2504': attribute type 12 has an invalid length. [ 390.452196][T16316] netlink: 'syz.3.2504': attribute type 29 has an invalid length. [ 390.528332][ T6585] batman_adv: batadv0: IGMP Querier appeared [ 390.534770][ T6585] batman_adv: batadv0: MLD Querier appeared [ 390.685813][T16328] FAULT_INJECTION: forcing a failure. [ 390.685813][T16328] name failslab, interval 1, probability 0, space 0, times 0 [ 390.709056][T16329] netlink: 'syz.3.2506': attribute type 14 has an invalid length. [ 390.715471][T16328] CPU: 1 UID: 0 PID: 16328 Comm: syz.1.2507 Not tainted syzkaller #0 PREEMPT(full) [ 390.715534][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.715561][T16328] Call Trace: [ 390.715584][T16328] [ 390.715613][T16328] dump_stack_lvl+0xe8/0x150 [ 390.715719][T16328] should_fail_ex+0x412/0x560 [ 390.715826][T16328] should_failslab+0xa8/0x100 [ 390.715966][T16328] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 390.716051][T16328] ? __alloc_skb+0x186/0x7d0 [ 390.716225][T16328] ? __alloc_skb+0x1d0/0x7d0 [ 390.716292][T16328] ? __local_bh_enable_ip+0xd0/0x130 [ 390.716413][T16328] __alloc_skb+0x1d0/0x7d0 [ 390.716520][T16328] netlink_sendmsg+0x5d4/0xb40 [ 390.716725][T16328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.716820][T16328] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.716945][T16328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.716984][T16328] ____sys_sendmsg+0x972/0x9f0 [ 390.717096][T16328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.717225][T16328] ? import_iovec+0x73/0xa0 [ 390.717331][T16328] ___sys_sendmsg+0x2a5/0x360 [ 390.717430][T16328] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.717621][T16328] ? __fget_files+0x2a/0x420 [ 390.717676][T16328] ? __fget_files+0x3a0/0x420 [ 390.717760][T16328] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.717856][T16328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.717973][T16328] ? __pfx_ksys_write+0x10/0x10 [ 390.718077][T16328] do_syscall_64+0x14d/0xf80 [ 390.718144][T16328] ? trace_irq_disable+0x3b/0x150 [ 390.718196][T16328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.718252][T16328] ? clear_bhb_loop+0x40/0x90 [ 390.718326][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.718381][T16328] RIP: 0033:0x7fc35939c819 [ 390.718443][T16328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.718508][T16328] RSP: 002b:00007fc35a254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.718572][T16328] RAX: ffffffffffffffda RBX: 00007fc359615fa0 RCX: 00007fc35939c819 [ 390.718627][T16328] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 390.718661][T16328] RBP: 00007fc35a254090 R08: 0000000000000000 R09: 0000000000000000 [ 390.718693][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.718726][T16328] R13: 00007fc359616038 R14: 00007fc359615fa0 R15: 00007ffddb8d0ce8 [ 390.718817][T16328] [ 390.978810][T16330] __nla_validate_parse: 4 callbacks suppressed [ 390.978831][T16330] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2506'. [ 391.228219][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 391.368464][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 391.391529][T16356] sctp: [Deprecated]: syz.1.2516 (pid 16356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.391529][T16356] Use struct sctp_sack_info instead [ 391.393980][ T6590] tipc: Subscription rejected, illegal request [ 391.438029][T16354] openvswitch: netlink: IPv4 tun info is not correct [ 391.637128][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 391.659275][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 391.746335][T16376] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 391.914141][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 391.940863][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 392.001065][T16383] syzkaller1: entered promiscuous mode [ 392.006744][T16383] syzkaller1: entered allmulticast mode [ 392.041528][T16396] syzkaller0: entered promiscuous mode [ 392.047209][T16396] syzkaller0: entered allmulticast mode [ 392.143891][T16402] ±ÿ: Caught tx_queue_len zero misconfig [ 392.151783][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2531'. [ 392.413273][T16410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2532'. [ 393.118396][T16462] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 393.163011][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2542'. [ 393.331719][T16478] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 393.369706][T16478] 8021q: adding VLAN 0 to HW filter on device bond11 [ 393.440136][T16478] bond11: (slave veth3): Enslaving as an active interface with a down link [ 393.566969][T16478] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 393.585110][T16478] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 393.907819][T16500] netlink: 'syz.2.2553': attribute type 9 has an invalid length. [ 394.007743][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 394.015924][ C0] lec:lec_tx_timeout: lec0 [ 394.020589][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 394.051611][T16510] Cannot find add_set index 2 as target [ 394.111029][T16505] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 394.120234][T16505] netlink: 'syz.3.2558': attribute type 2 has an invalid length. [ 394.147879][T16505] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 394.591993][T16531] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 394.750754][T16554] xt_TCPMSS: Only works on TCP SYN packets [ 394.896036][T16558] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 395.054120][T16571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 395.304363][T16584] syzkaller1: entered promiscuous mode [ 395.320707][T16584] syzkaller1: entered allmulticast mode [ 395.690898][T16611] FAULT_INJECTION: forcing a failure. [ 395.690898][T16611] name failslab, interval 1, probability 0, space 0, times 0 [ 395.718581][T16611] CPU: 1 UID: 0 PID: 16611 Comm: syz.3.2582 Not tainted syzkaller #0 PREEMPT(full) [ 395.718613][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.718639][T16611] Call Trace: [ 395.718648][T16611] [ 395.718657][T16611] dump_stack_lvl+0xe8/0x150 [ 395.718693][T16611] should_fail_ex+0x412/0x560 [ 395.718733][T16611] should_failslab+0xa8/0x100 [ 395.718778][T16611] __kmalloc_noprof+0xe8/0x760 [ 395.718804][T16611] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 395.718838][T16611] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 395.718872][T16611] genl_family_rcv_msg_doit+0xd9/0x330 [ 395.718898][T16611] ? __asan_memcpy+0x40/0x70 [ 395.718924][T16611] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.718959][T16611] ? apparmor_capable+0x126/0x170 [ 395.718988][T16611] ? bpf_lsm_capable+0x9/0x20 [ 395.719020][T16611] ? security_capable+0x7e/0x2c0 [ 395.719170][T16611] genl_rcv_msg+0x61c/0x7a0 [ 395.719203][T16611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.719226][T16611] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 395.719296][T16611] netlink_rcv_skb+0x232/0x4b0 [ 395.719328][T16611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.719354][T16611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.719400][T16611] ? down_read+0x272/0x2e0 [ 395.719459][T16611] ? genl_rcv+0xd/0x40 [ 395.719483][T16611] genl_rcv+0x28/0x40 [ 395.719503][T16611] netlink_unicast+0x75c/0x8e0 [ 395.719541][T16611] netlink_sendmsg+0x813/0xb40 [ 395.719584][T16611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.719620][T16611] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.719653][T16611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.719681][T16611] ____sys_sendmsg+0x972/0x9f0 [ 395.719726][T16611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.719768][T16611] ? import_iovec+0x73/0xa0 [ 395.719798][T16611] ___sys_sendmsg+0x2a5/0x360 [ 395.719838][T16611] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.719906][T16611] ? __fget_files+0x2a/0x420 [ 395.719924][T16611] ? __fget_files+0x3a0/0x420 [ 395.719954][T16611] __x64_sys_sendmsg+0x1bd/0x2a0 [ 395.719990][T16611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.720031][T16611] ? __pfx_ksys_write+0x10/0x10 [ 395.720066][T16611] do_syscall_64+0x14d/0xf80 [ 395.720091][T16611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.720112][T16611] ? clear_bhb_loop+0x40/0x90 [ 395.720138][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.720158][T16611] RIP: 0033:0x7f0f3d99c819 [ 395.720177][T16611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.720195][T16611] RSP: 002b:00007f0f3e797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.720217][T16611] RAX: ffffffffffffffda RBX: 00007f0f3dc15fa0 RCX: 00007f0f3d99c819 [ 395.720232][T16611] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 395.720244][T16611] RBP: 00007f0f3e797090 R08: 0000000000000000 R09: 0000000000000000 [ 395.720257][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.720268][T16611] R13: 00007f0f3dc16038 R14: 00007f0f3dc15fa0 R15: 00007ffd04d98b48 [ 395.720299][T16611] [ 396.469304][T16638] __nla_validate_parse: 14 callbacks suppressed [ 396.469328][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2594'. [ 396.486282][T16638] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2594'. [ 396.866106][T16662] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.2600'. [ 396.975186][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 397.193087][T16678] ±ÿ speed is unknown, defaulting to 1000 [ 397.301744][T16682] ±ÿ speed is unknown, defaulting to 1000 [ 397.417632][T16684] ±ÿ speed is unknown, defaulting to 1000 [ 398.243048][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2610'. [ 399.027754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 399.035893][ C0] lec:lec_tx_timeout: lec0 [ 399.041631][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 399.125630][ T29] audit: type=1804 audit(1776238443.866:10): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2615" name="/newroot/558/cgroup.controllers" dev="tmpfs" ino=2878 res=1 errno=0 [ 399.215575][ T29] audit: type=1800 audit(1776238443.866:11): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2615" name="cgroup.controllers" dev="tmpfs" ino=2878 res=0 errno=0 [ 399.642579][T16748] syzkaller0: entered promiscuous mode [ 400.644887][T16808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2634'. [ 400.731676][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2637'. [ 400.840084][T16819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2639'. [ 400.855995][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'. [ 400.886078][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'. [ 401.133927][T16841] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 401.482520][T16851] tunl0: Caught tx_queue_len zero misconfig [ 401.488594][T16851] __nla_validate_parse: 4 callbacks suppressed [ 401.488614][T16851] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2648'. [ 401.624549][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 401.681056][T16856] netlink: 'syz.2.2651': attribute type 19 has an invalid length. [ 401.844721][T16865] ±ÿ speed is unknown, defaulting to 1000 [ 401.866821][T16868] gretap0: entered allmulticast mode [ 402.023285][T16877] netlink: zone id is out of range [ 402.050172][T16877] netlink: zone id is out of range [ 402.069998][T16877] netlink: zone id is out of range [ 402.086209][T16877] netlink: zone id is out of range [ 402.102310][T16877] netlink: zone id is out of range [ 402.120167][T16877] netlink: zone id is out of range [ 402.133908][T16877] netlink: zone id is out of range [ 402.144352][T16877] netlink: zone id is out of range [ 402.153869][T16877] netlink: zone id is out of range [ 402.160188][T16877] netlink: zone id is out of range [ 402.355139][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.441271][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.457949][T16895] 8021q: VLANs not supported on caif0 [ 402.465718][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.478870][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.534083][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.576880][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.603198][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.620667][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2661'. [ 402.645243][T16898] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 402.664941][T16898] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 402.782979][T16889] netlink: 'syz.5.2659': attribute type 1 has an invalid length. [ 403.004940][T16912] gtp4: entered promiscuous mode [ 403.030298][T16912] gtp4: entered allmulticast mode [ 403.866219][T16942] syzkaller0: entered promiscuous mode [ 404.057738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.066215][ C0] lec:lec_tx_timeout: lec0 [ 404.071354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 404.201634][T16954] netlink: 'syz.5.2674': attribute type 4 has an invalid length. [ 404.375547][T16961] tipc: Started in network mode [ 404.386201][T16961] tipc: Node identity 5abf440690d6, cluster identity 4711 [ 404.397243][T16961] tipc: Enabled bearer , priority 0 [ 404.590352][T16961] syzkaller0: entered promiscuous mode [ 404.631719][T16961] syzkaller0: entered allmulticast mode [ 404.638114][T16961] tipc: Resetting bearer [ 404.798293][T16960] tipc: Resetting bearer [ 407.088553][T16960] tipc: Disabling bearer [ 407.150621][ T9953] tipc: Node number set to 3395896326 [ 407.236558][T16996] ip6erspan0: entered promiscuous mode [ 407.257827][T16996] ip6erspan0: entered allmulticast mode [ 407.353000][T17003] __nla_validate_parse: 49 callbacks suppressed [ 407.353022][T17003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2689'. [ 407.382804][T17004] syzkaller0: entered promiscuous mode [ 407.388658][T17004] syzkaller0: entered allmulticast mode [ 407.439864][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 407.509086][T17006] syzkaller0: entered promiscuous mode [ 407.514711][T17006] syzkaller0: entered allmulticast mode [ 407.602195][T17021] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 407.867868][T17033] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2693'. [ 407.894794][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 407.917883][T17044] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 408.251961][T17047] ±ÿ speed is unknown, defaulting to 1000 [ 408.304105][T17055] netlink: 'syz.3.2699': attribute type 30 has an invalid length. [ 409.077757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.086325][ C0] lec:lec_tx_timeout: lec0 [ 409.092012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 409.658444][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2712'. [ 409.908374][T17088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 410.007239][T17118] syzkaller1: entered promiscuous mode [ 410.013350][T17118] syzkaller1: entered allmulticast mode [ 410.061358][T17122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 410.089496][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 410.100841][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 410.364291][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2716'. [ 410.437206][T17137] net_ratelimit: 3 callbacks suppressed [ 410.437227][T17137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.946821][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 410.978836][T17148] netlink: 'syz.1.2724': attribute type 14 has an invalid length. [ 411.055677][T17153] netlink: 'syz.1.2724': attribute type 3 has an invalid length. [ 411.709064][T17178] erspan0: left allmulticast mode [ 411.748644][T17203] netlink: 'syz.4.2738': attribute type 3 has an invalid length. [ 411.846201][ T84] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.873566][ T84] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.900335][ T84] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.919133][ T84] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.020906][T17216] netlink: 'syz.2.2742': attribute type 10 has an invalid length. [ 412.078263][T17216] batadv0: left allmulticast mode [ 412.083534][T17216] batadv0: left promiscuous mode [ 412.102447][T17216] bridge0: port 1(batadv0) entered disabled state [ 412.145746][T17216] netlink: 'syz.2.2742': attribute type 10 has an invalid length. [ 412.156194][T17216] batadv0: entered promiscuous mode [ 412.162240][T17216] batadv0: entered allmulticast mode [ 412.168593][T17216] bridge0: port 1(batadv0) entered blocking state [ 412.175170][T17216] bridge0: port 1(batadv0) entered disabled state [ 412.195097][T17224] tc_dump_action: action bad kind [ 412.438299][T17235] netlink: 'syz.1.2747': attribute type 1 has an invalid length. [ 412.563665][T17246] __nla_validate_parse: 8 callbacks suppressed [ 412.563685][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2747'. [ 412.614244][T17241] bond13: (slave geneve2): making interface the new active one [ 412.670365][T17241] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 412.683981][T17246] 8021q: adding VLAN 0 to HW filter on device bond13 [ 412.693509][ T84] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.729244][ T84] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.765490][ T84] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.803363][ T84] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.923947][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2753'. [ 412.945414][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2753'. [ 412.962388][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2753'. [ 413.111661][T17265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2751'. [ 413.122044][T17268] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2751'. [ 413.143695][T17263] netlink: 'syz.2.2754': attribute type 4 has an invalid length. [ 413.154514][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'. [ 413.197793][T17263] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2754'. [ 413.418426][T17287] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2757'. [ 413.579221][T17292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2761'. [ 413.611240][T17298] netlink: 'syz.3.2760': attribute type 3 has an invalid length. [ 414.680106][T17345] netlink: 'syz.5.2773': attribute type 1 has an invalid length. [ 414.818814][T17345] 8021q: adding VLAN 0 to HW filter on device bond11 [ 414.857325][T17356] netlink: 'syz.3.2776': attribute type 11 has an invalid length. [ 414.927784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 414.935876][ C0] lec:lec_tx_timeout: lec0 [ 414.942397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.183523][T17369] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 415.193765][T17369] syzkaller1: linktype set to 780 [ 415.218368][T17368] ±ÿ speed is unknown, defaulting to 1000 [ 415.541012][T17390] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 415.606302][T17390] 8021q: adding VLAN 0 to HW filter on device bond14 [ 415.800814][T17403] ±ÿ speed is unknown, defaulting to 1000 [ 415.834558][T17397] syzkaller0: entered promiscuous mode [ 415.840561][T17397] syzkaller0: entered allmulticast mode [ 415.895007][T17413] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 416.990085][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.010493][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.032936][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.056976][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.075722][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.451366][T17453] ±ÿ speed is unknown, defaulting to 1000 [ 417.603445][T17473] __nla_validate_parse: 10 callbacks suppressed [ 417.603468][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'. [ 417.731197][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 417.824129][T17480] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2809'. [ 417.873995][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 417.927627][T17484] netlink: 'syz.5.2811': attribute type 1 has an invalid length. [ 417.941676][T17484] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2811'. [ 417.951812][T17484] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2811'. [ 417.961334][T17484] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2811'. [ 418.034902][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 418.078111][T17489] netlink: 'syz.2.2812': attribute type 4 has an invalid length. [ 418.118769][T17489] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2812'. [ 418.131712][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 418.293088][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.332001][T17492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.444027][T17493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.615915][T17453] chnl_net:caif_netlink_parms(): no params data found [ 418.899892][T17453] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.907322][T17453] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.915355][T17453] bridge_slave_0: entered allmulticast mode [ 418.923676][T17453] bridge_slave_0: entered promiscuous mode [ 418.934706][T17453] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.942425][T17453] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.950296][T17453] bridge_slave_1: entered allmulticast mode [ 418.958803][T17453] bridge_slave_1: entered promiscuous mode [ 419.084226][T17453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.103354][T17453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.167521][T17523] Bluetooth: MGMT ver 1.23 [ 419.169301][ T5844] Bluetooth: hci2: command tx timeout [ 419.232488][T17453] team0: Port device team_slave_0 added [ 419.241756][T17453] team0: Port device team_slave_1 added [ 419.297263][T17453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.306646][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.333927][T17453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.365607][T17453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.378417][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.408369][T17453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.518770][T17453] hsr_slave_0: entered promiscuous mode [ 419.525452][T17453] hsr_slave_1: entered promiscuous mode [ 419.532785][T17453] debugfs: 'hsr0' already exists in 'hsr' [ 419.541600][T17531] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 419.547310][T17453] Cannot create hsr debugfs directory [ 419.745336][T17537] netlink: 'syz.5.2823': attribute type 13 has an invalid length. [ 419.753624][T17537] netlink: 'syz.5.2823': attribute type 17 has an invalid length. [ 419.957731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.965924][ C0] lec:lec_tx_timeout: lec0 [ 419.972702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 420.079924][ T6583] gretap0 (unregistering): left promiscuous mode [ 420.125148][ T6583] bond2 (unregistering): (slave gretap2): Releasing active interface [ 420.174813][ T6583] bond7 (unregistering): (slave gretap4): Releasing active interface [ 420.395209][ T6583] bond0 (unregistering): left promiscuous mode [ 420.407287][ T6583] bond_slave_0: left promiscuous mode [ 420.413704][ T6583] bond_slave_1: left promiscuous mode [ 420.442520][ T6583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.453037][ T6583] bond_slave_0: left allmulticast mode [ 420.460739][ T6583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.478302][ T6583] bond_slave_1: left allmulticast mode [ 420.484978][ T6583] bond0 (unregistering): Released all slaves [ 420.503377][ T6583] bond1 (unregistering): Released all slaves [ 420.535029][ T6583] bond2 (unregistering): Released all slaves [ 420.555640][ T6583] bond3 (unregistering): Released all slaves [ 420.588218][ T6583] bond4 (unregistering): Released all slaves [ 420.612250][T17550] netlink: 'syz.1.2827': attribute type 4 has an invalid length. [ 420.622172][ T6583] bond5 (unregistering): Released all slaves [ 420.644506][T17550] x_tables: duplicate underflow at hook 1 [ 420.646791][ T6583] bond6 (unregistering): Released all slaves [ 420.675290][ T6583] bond7 (unregistering): Released all slaves [ 420.699326][ T6583] bond8 (unregistering): Released all slaves [ 420.713811][T17553] netlink: 'syz.1.2827': attribute type 4 has an invalid length. [ 420.732701][ T6583] bond9 (unregistering): Released all slaves [ 420.845666][T17537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.864911][T17537] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.906350][T17537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.079310][T17564] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 421.112082][ T6583] tipc: Left network mode [ 421.247909][ T5844] Bluetooth: hci2: command tx timeout [ 421.253609][T17567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.335190][ T6583] IPVS: stopping master sync thread 8111 ... [ 421.343444][T17557] syzkaller0: entered promiscuous mode [ 421.355794][T17557] syzkaller0: entered allmulticast mode [ 421.594795][T17575] syzkaller0: entered promiscuous mode [ 421.600482][T17575] syzkaller0: entered allmulticast mode [ 421.937023][T17585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.329566][ T5844] Bluetooth: hci2: command tx timeout [ 423.850771][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 424.301418][T17619] netlink: 'syz.5.2836': attribute type 1 has an invalid length. [ 424.313202][T17620] netlink: 'syz.2.2837': attribute type 3 has an invalid length. [ 424.339831][T17620] __nla_validate_parse: 5 callbacks suppressed [ 424.339852][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 424.372586][T17619] netlink: 'syz.5.2836': attribute type 1 has an invalid length. [ 424.389939][T17622] netlink: 'syz.5.2836': attribute type 4 has an invalid length. [ 424.408309][T17619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2836'. [ 424.426943][T17619] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2836'. [ 424.462363][T17628] netlink: 'syz.5.2836': attribute type 4 has an invalid length. [ 424.963663][T17453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.987732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 424.995802][ C0] lec:lec_tx_timeout: lec0 [ 425.001432][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.044172][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.068754][T17453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.133911][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.177354][T17453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.196021][T17655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2845'. [ 425.275544][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.362608][T17453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.403723][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.410964][ T5844] Bluetooth: hci2: command tx timeout [ 425.484143][ T6583] hsr_slave_0: left promiscuous mode [ 425.527509][ T6583] hsr_slave_1: left promiscuous mode [ 425.535194][T17656] netlink: 'syz.5.2844': attribute type 1 has an invalid length. [ 425.557787][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.634114][ T6583] pim6reg (unregistering): left allmulticast mode [ 426.063818][T17650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2844'. [ 426.151393][T17666] syzkaller0: entered promiscuous mode [ 426.157203][T17666] syzkaller0: entered allmulticast mode [ 426.519952][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 427.904003][T17683] hsr_slave_1 (unregistering): left promiscuous mode [ 428.069939][T17691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2851'. [ 428.188252][T17691] netlink: 'syz.2.2851': attribute type 8 has an invalid length. [ 428.333324][T17453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.388290][T17453] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.398147][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'. [ 428.422494][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.429735][ T9585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.520483][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.527924][ T9585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.680409][T17710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 428.726009][T17710] xt_hashlimit: size too large, truncated to 1048576 [ 428.999738][ T6583] IPVS: stop unused estimator thread 0... [ 429.342386][T17453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.708832][T17746] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2859'. [ 429.726553][T17746] syzkaller0: entered promiscuous mode [ 429.737258][T17746] syzkaller0: entered allmulticast mode [ 430.007740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.016010][ C0] lec:lec_tx_timeout: lec0 [ 430.020904][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.236790][T17453] veth0_vlan: entered promiscuous mode [ 430.285245][T17453] veth1_vlan: entered promiscuous mode [ 430.391908][T17453] veth0_macvtap: entered promiscuous mode [ 430.429365][T17453] veth1_macvtap: entered promiscuous mode [ 430.490590][T17453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.544103][T17453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.592254][ T6583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.613405][ T6583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.647358][ T6583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.674021][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2864'. [ 430.709408][ T6583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.959404][ T6585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.005266][ T6585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.072035][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.097551][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.623443][T17819] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 431.667291][T17824] ±ÿ speed is unknown, defaulting to 1000 [ 432.118568][T17853] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2875'. [ 432.461409][T17872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.652598][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'. [ 432.708863][T17878] netlink: 'syz.5.2881': attribute type 4 has an invalid length. [ 432.717058][T17878] netlink: 15282 bytes leftover after parsing attributes in process `syz.5.2881'. [ 433.158467][T17892] netlink: 'syz.4.2886': attribute type 4 has an invalid length. [ 433.166380][T17892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2886'. [ 433.237327][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.247337][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.257742][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.265877][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.276102][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.329108][T17894] ±ÿ speed is unknown, defaulting to 1000 [ 433.493073][T17908] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 433.555183][T17908] tun0: tun_chr_ioctl cmd 2148553947 [ 433.562105][T17910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2891'. [ 433.581968][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2892'. [ 433.621954][T17913] hsr_slave_1 (unregistering): left promiscuous mode [ 433.677875][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2889'. [ 433.687189][T17910] syzkaller0: entered promiscuous mode [ 433.697199][T17910] syzkaller0: entered allmulticast mode [ 433.741564][T17910] FAULT_INJECTION: forcing a failure. [ 433.741564][T17910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.760584][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.770993][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.796786][T17910] CPU: 0 UID: 0 PID: 17910 Comm: syz.1.2891 Not tainted syzkaller #0 PREEMPT(full) [ 433.796815][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 433.796830][T17910] Call Trace: [ 433.796838][T17910] [ 433.796847][T17910] dump_stack_lvl+0xe8/0x150 [ 433.796885][T17910] should_fail_ex+0x412/0x560 [ 433.796928][T17910] _copy_to_user+0x31/0xb0 [ 433.796958][T17910] simple_read_from_buffer+0xe1/0x170 [ 433.796998][T17910] proc_fail_nth_read+0x1bb/0x230 [ 433.797078][T17910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.797124][T17910] ? rw_verify_area+0x2a6/0x4d0 [ 433.797149][T17910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.797184][T17910] vfs_read+0x20c/0xa70 [ 433.797207][T17910] ? fdget_pos+0x246/0x320 [ 433.797233][T17910] ? __pfx___mutex_lock+0x10/0x10 [ 433.797263][T17910] ? __pfx_vfs_read+0x10/0x10 [ 433.797289][T17910] ? __fget_files+0x2a/0x420 [ 433.797315][T17910] ? __fget_files+0x3a0/0x420 [ 433.797333][T17910] ? __fget_files+0x2a/0x420 [ 433.797364][T17910] ksys_read+0x150/0x270 [ 433.797392][T17910] ? __pfx_ksys_read+0x10/0x10 [ 433.797431][T17910] do_syscall_64+0x14d/0xf80 [ 433.797457][T17910] ? trace_irq_disable+0x3b/0x150 [ 433.797477][T17910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.797499][T17910] ? clear_bhb_loop+0x40/0x90 [ 433.797526][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.797549][T17910] RIP: 0033:0x7fc35935d04e [ 433.797570][T17910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.797589][T17910] RSP: 002b:00007fc35a253fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.797613][T17910] RAX: ffffffffffffffda RBX: 00007fc35a2546c0 RCX: 00007fc35935d04e [ 433.797629][T17910] RDX: 000000000000000f RSI: 00007fc35a2540a0 RDI: 000000000000000b [ 433.797642][T17910] RBP: 00007fc35a254090 R08: 0000000000000000 R09: 0000000000000000 [ 433.797660][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.797671][T17910] R13: 00007fc359616038 R14: 00007fc359615fa0 R15: 00007ffddb8d0ce8 [ 433.797706][T17910] [ 434.101023][T17925] veth17: entered promiscuous mode [ 434.216818][T17935] ip6t_srh: unknown srh invflags BA61 [ 434.558964][T17942] syzkaller0: entered promiscuous mode [ 434.564559][T17942] syzkaller0: entered allmulticast mode [ 434.662529][T17945] netlink: 'syz.2.2898': attribute type 21 has an invalid length. [ 435.027768][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 435.035861][ C0] lec:lec_tx_timeout: lec0 [ 435.041015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.215111][T17894] chnl_net:caif_netlink_parms(): no params data found [ 435.246725][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2901'. [ 435.266159][T17970] tipc: Enabling of bearer rejected, failed to enable media [ 435.327905][ T5844] Bluetooth: hci0: command tx timeout [ 435.393948][T17977] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2902'. [ 435.492837][T17989] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2906'. [ 435.544883][T17977] syzkaller0: entered promiscuous mode [ 435.553197][T17977] syzkaller0: entered allmulticast mode [ 435.882959][T17894] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.895351][T17894] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.910754][T17894] bridge_slave_0: entered allmulticast mode [ 435.932275][T17894] bridge_slave_0: entered promiscuous mode [ 436.011533][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'. [ 436.026532][T17894] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.043182][T17894] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.052538][T17894] bridge_slave_1: entered allmulticast mode [ 436.061659][T18010] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 436.073889][T17894] bridge_slave_1: entered promiscuous mode [ 436.085109][T18006] batadv_slave_1: entered promiscuous mode [ 436.145934][T18010] bond14: entered promiscuous mode [ 436.152080][T18010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 436.417421][T18010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 436.438384][T18010] bond14: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 436.470886][T18010] bond14: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 436.525008][T18010] bond14: (slave ip6gre3): making interface the new active one [ 436.547995][T18010] ip6gre3: entered promiscuous mode [ 436.557459][T18010] bond14: (slave ip6gre3): Enslaving as an active interface with an up link [ 436.620067][T17894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.649359][T18001] batadv_slave_1: left promiscuous mode [ 436.670248][T17894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.711915][T18028] syzkaller1: entered promiscuous mode [ 436.717583][T18028] syzkaller1: entered allmulticast mode [ 436.985175][T17894] team0: Port device team_slave_0 added [ 437.033822][T17894] team0: Port device team_slave_1 added [ 437.166858][T18063] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 437.180904][T17894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.198216][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.235563][T17894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.255429][T18063] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 437.260014][T18058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2917'. [ 437.305185][T18071] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 437.327031][T17894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.345412][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.373968][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 437.410261][T17894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.421824][ T5844] Bluetooth: hci0: command tx timeout [ 437.538717][T18058] bond0 (unregistering): (slave c5ÿ): Releasing backup interface [ 437.557109][T18058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.586977][T18058] bond0 (unregistering): Released all slaves [ 437.793623][T17894] hsr_slave_0: entered promiscuous mode [ 437.824192][T17894] hsr_slave_1: entered promiscuous mode [ 437.841318][T17894] debugfs: 'hsr0' already exists in 'hsr' [ 437.853574][T17894] Cannot create hsr debugfs directory [ 438.008514][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 438.081640][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 439.430230][T18146] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2931'. [ 439.497764][ T5844] Bluetooth: hci0: command tx timeout [ 439.528380][T17894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.582992][T17894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.652926][T17894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.693422][T17894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.729694][T17894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.767468][T17894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.784774][T18167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2936'. [ 439.798022][T17894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.813585][T17894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.850136][T18174] netlink: 'syz.2.2935': attribute type 3 has an invalid length. [ 440.048672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 440.056800][ C0] lec:lec_tx_timeout: lec0 [ 440.061535][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 440.242177][T17894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.321259][T17894] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.373120][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.380400][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.424025][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.431300][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.622117][T17894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.781394][T18197] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 440.797190][T18197] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2939'. [ 441.007985][T18197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2939'. [ 441.143675][T17894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.243910][T18213] sctp: [Deprecated]: syz.1.2943 (pid 18213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.243910][T18213] Use struct sctp_sack_info instead [ 441.282656][T18215] raw_sendmsg: syz.4.2942 forgot to set AF_INET. Fix it! [ 441.497445][T18227] netlink: 'syz.1.2945': attribute type 11 has an invalid length. [ 441.508834][T18227] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2945'. [ 441.569735][ T5844] Bluetooth: hci0: command tx timeout [ 441.762127][T18234] syzkaller0: entered promiscuous mode [ 441.768785][T18234] syzkaller0: entered allmulticast mode [ 441.804752][T18238] netlink: 'syz.2.2947': attribute type 3 has an invalid length. [ 443.780572][T18250] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 443.861933][T17894] veth0_vlan: entered promiscuous mode [ 443.894614][T17894] veth1_vlan: entered promiscuous mode [ 443.901759][T18257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.072393][T18265] macsec3: entered promiscuous mode [ 444.082574][T18265] virt_wifi0: entered promiscuous mode [ 444.107215][T18262] hmó3)óÿ: entered promiscuous mode [ 444.162973][T17894] veth0_macvtap: entered promiscuous mode [ 444.209966][T18274] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2958'. [ 444.225311][T17894] veth1_macvtap: entered promiscuous mode [ 444.231232][T18274] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 444.265089][T18274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2958'. [ 444.300608][T17894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.346155][T17894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.399243][ T6583] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.429032][ T6583] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.455507][ T6583] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.476066][ T6583] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.703139][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.747957][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.866462][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.885369][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.913546][T18299] netlink: 'syz.1.2960': attribute type 3 has an invalid length. [ 445.067823][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.075974][ C0] lec:lec_tx_timeout: lec0 [ 445.081142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.351428][T18313] xt_hashlimit: size too large, truncated to 1048576 [ 445.369734][T18313] xt_hashlimit: max too large, truncated to 1048576 [ 445.380836][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.391085][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.401802][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.412309][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.420979][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.436049][T18313] xt_hashlimit: size too large, truncated to 1048576 [ 445.443420][T18313] xt_hashlimit: max too large, truncated to 1048576 [ 445.591891][T18314] ±ÿ speed is unknown, defaulting to 1000 [ 445.882819][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 446.037446][T18336] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 446.493360][T18352] syzkaller1: entered promiscuous mode [ 446.500208][T18352] syzkaller1: entered allmulticast mode [ 446.519864][T18355] netlink: 'syz.6.2975': attribute type 2 has an invalid length. [ 446.545791][T18355] !: entered promiscuous mode [ 446.576012][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'. [ 446.589225][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2975'. [ 446.625026][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2975'. [ 446.815337][T18314] chnl_net:caif_netlink_parms(): no params data found [ 447.211373][T18314] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.227867][T18314] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.235212][T18314] bridge_slave_0: entered allmulticast mode [ 447.268889][T18314] bridge_slave_0: entered promiscuous mode [ 447.294637][T18314] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.322930][T18314] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.348265][T18314] bridge_slave_1: entered allmulticast mode [ 447.362864][T18314] bridge_slave_1: entered promiscuous mode [ 447.376495][T18392] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2981'. [ 447.398450][T18391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2981'. [ 447.431697][T18397] netlink: 'syz.1.2982': attribute type 4 has an invalid length. [ 447.439817][T18397] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2982'. [ 447.487900][ T5844] Bluetooth: hci6: command tx timeout [ 447.534880][T18314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.562412][T18314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.710510][T18314] team0: Port device team_slave_0 added [ 447.733732][T18314] team0: Port device team_slave_1 added [ 447.821636][T18314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.838592][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.868542][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2987'. [ 447.877611][T18411] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2987'. [ 447.895083][T18314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.911044][T18314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.918441][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.947084][T18314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.966095][T18411] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2987'. [ 448.020675][T18411] syzkaller0: entered promiscuous mode [ 448.029491][T18411] syzkaller0: entered allmulticast mode [ 448.167204][T18314] hsr_slave_0: entered promiscuous mode [ 448.176019][T18314] hsr_slave_1: entered promiscuous mode [ 448.183176][T18314] debugfs: 'hsr0' already exists in 'hsr' [ 448.189096][T18314] Cannot create hsr debugfs directory [ 448.241445][T18424] netlink: 'syz.5.2989': attribute type 39 has an invalid length. [ 448.577466][T18442] xt_policy: neither incoming nor outgoing policy selected [ 448.633800][T18437] netlink: 'syz.5.2992': attribute type 29 has an invalid length. [ 449.165577][T18472] syzkaller0: entered promiscuous mode [ 449.173870][T18472] syzkaller0: entered allmulticast mode [ 449.232234][T18472] 0: reclassify loop, rule prio 0, protocol 800 [ 449.568739][ T5844] Bluetooth: hci6: command tx timeout [ 449.602259][T18314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.641717][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.656958][T18314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.674643][T18490] netlink: 'syz.6.3003': attribute type 2 has an invalid length. [ 449.683576][T18490] netlink: 'syz.6.3003': attribute type 2 has an invalid length. [ 449.698366][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.706960][T18314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.739588][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.758938][T18314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.780240][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.087782][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.096014][ C0] lec:lec_tx_timeout: lec0 [ 450.101094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.131657][T18314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.195554][T18314] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.245225][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.252479][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.363826][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.371064][ T6576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.803630][T18526] gretap2: entered promiscuous mode [ 450.838724][T18526] gretap2: entered allmulticast mode [ 451.038610][T18539] __nla_validate_parse: 10 callbacks suppressed [ 451.038634][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 451.066250][T18539] netlink: 'syz.1.3015': attribute type 21 has an invalid length. [ 451.128909][T18531] ±ÿ speed is unknown, defaulting to 1000 [ 451.214880][T18314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.337378][T18314] veth0_vlan: entered promiscuous mode [ 451.367971][T18314] veth1_vlan: entered promiscuous mode [ 451.493747][T18314] veth0_macvtap: entered promiscuous mode [ 451.604800][T18314] veth1_macvtap: entered promiscuous mode [ 451.649686][ T5844] Bluetooth: hci6: command tx timeout [ 451.676397][T18314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.682327][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 451.722561][T18314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.882375][T18567] 5nè‹Ò: entered promiscuous mode [ 451.918667][ T6601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.965936][ T6601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.064145][ T6601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.132823][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 452.218467][ T84] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.410244][T18584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.381551][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.408568][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.572024][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.596550][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.727966][ T5844] Bluetooth: hci6: command tx timeout [ 453.814373][T18627] tipc: Failed to remove unknown binding: 66,0,0/3395896326:2288039775/2288039776 [ 453.824636][T18627] tipc: Failed to remove unknown binding: 66,0,0/3395896326:2288039775/2288039776 [ 454.358991][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 454.635436][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.646840][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.668282][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.684406][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.692900][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.853779][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.864006][T18651] ±ÿ speed is unknown, defaulting to 1000 [ 454.874756][T18656] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3042'. [ 454.888067][T18656] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3042'. [ 454.897181][T18656] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3042'. [ 455.023078][T18658] syzkaller0: entered promiscuous mode [ 455.056186][T18658] syzkaller0: entered allmulticast mode [ 455.100238][T18665] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 455.253692][ T9991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.443606][T18667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.846562][T18669] syzkaller1: entered promiscuous mode [ 455.883461][T18692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.887857][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 455.900468][ C0] lec:lec_tx_timeout: lec0 [ 455.905551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.917154][T18669] syzkaller1: entered allmulticast mode [ 455.923701][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.051360][ T9991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.061778][T18696] Bluetooth: MGMT ver 1.23 [ 456.077181][T18696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3051'. [ 456.101286][T18675] ±ÿ speed is unknown, defaulting to 1000 [ 456.329252][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.348104][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.359811][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 456.378032][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.399374][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.422012][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.465312][T18651] chnl_net:caif_netlink_parms(): no params data found [ 456.601953][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 456.770069][ T5845] Bluetooth: hci3: command tx timeout [ 456.843676][T18714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 456.892419][T18651] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.913247][T18651] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.937149][T18651] bridge_slave_0: entered allmulticast mode [ 456.954250][T18651] bridge_slave_0: entered promiscuous mode [ 456.989759][T18651] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.008759][T18651] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.028025][T18651] bridge_slave_1: entered allmulticast mode [ 457.040250][T18651] bridge_slave_1: entered promiscuous mode [ 457.205079][T18651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.242687][T18651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.354310][T18651] team0: Port device team_slave_0 added [ 457.382965][T18651] team0: Port device team_slave_1 added [ 457.514698][T18651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.532272][T18651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.638118][T18651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.671132][T18651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.680624][T18651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.742806][T18651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.846451][T18651] hsr_slave_0: entered promiscuous mode [ 457.855547][T18651] hsr_slave_1: entered promiscuous mode [ 457.862349][T18651] debugfs: 'hsr0' already exists in 'hsr' [ 457.868726][T18651] Cannot create hsr debugfs directory [ 458.041143][T18730] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3060'. [ 458.112717][T18742] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3063'. [ 458.127815][T18730] syzkaller0: entered promiscuous mode [ 458.147246][T18746] Cannot find add_set index 1 as target [ 458.156015][T18746] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 458.171259][T18730] syzkaller0: entered allmulticast mode [ 458.350878][T18755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3067'. [ 458.767498][T18775] ip6erspan0: entered allmulticast mode [ 458.775733][T18770] ±ÿ speed is unknown, defaulting to 1000 [ 458.797069][T18651] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 458.814579][T18777] Cannot find del_set index 0 as target [ 458.849173][ T5845] Bluetooth: hci3: command tx timeout [ 458.938274][T18651] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 459.066722][T18651] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 459.238241][T18789] syzkaller0: entered promiscuous mode [ 459.244013][T18789] syzkaller0: entered allmulticast mode [ 459.262533][T18651] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 459.500013][T18801] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3081'. [ 459.509368][T18801] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3081'. [ 459.899093][ T42] net_ratelimit: 2750 callbacks suppressed [ 459.899117][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.048130][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.531054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.927769][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 460.935930][ C0] lec:lec_tx_timeout: lec0 [ 460.940864][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.942121][ T5845] Bluetooth: hci3: command tx timeout [ 461.088187][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.484574][T18815] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 461.515511][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3082'. [ 461.679766][T18812] pim6reg1: entered promiscuous mode [ 461.685244][T18812] pim6reg1: entered allmulticast mode [ 461.777150][T18651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.825974][T18651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.843189][T18651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.894765][T18651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.942695][T18651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.963941][T18651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.975873][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3087'. [ 462.005754][T18651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.050002][T18651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.129057][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.137857][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.373361][T18651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.432521][T18651] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.453207][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.460532][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.483178][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.490509][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.757431][T18860] syzkaller0: entered promiscuous mode [ 462.780472][T18860] syzkaller0: entered allmulticast mode [ 463.009520][ T5845] Bluetooth: hci3: command tx timeout [ 463.188805][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.619405][T18879] netlink: 'syz.4.3098': attribute type 21 has an invalid length. [ 463.627649][T18879] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3098'. [ 464.210138][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.371942][ T9991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.544750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.804599][T18876] dummy0: entered promiscuous mode [ 464.811977][T18876] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 464.825384][T18879] netlink: 'syz.4.3098': attribute type 4 has an invalid length. [ 464.833830][T18879] netlink: 'syz.4.3098': attribute type 5 has an invalid length. [ 464.855095][T18879] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3098'. [ 464.906560][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 464.929034][T18651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.936043][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 465.072274][T18651] veth0_vlan: entered promiscuous mode [ 465.095386][T18651] veth1_vlan: entered promiscuous mode [ 465.135438][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 465.165750][T18651] veth0_macvtap: entered promiscuous mode [ 465.178103][ T9991] net_ratelimit: 23 callbacks suppressed [ 465.178126][ T9991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.200634][T18651] veth1_macvtap: entered promiscuous mode [ 465.248456][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.289920][T18651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.319580][T18651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.346792][ T6576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.361898][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 465.391841][ T6576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.401573][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'. [ 465.429519][T18901] netlink: 'syz.2.3105': attribute type 20 has an invalid length. [ 465.436359][ T6576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.455029][ T6576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.765499][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.775964][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.895055][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.904938][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.919928][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 465.947698][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 465.955799][ C0] lec:lec_tx_timeout: lec0 [ 465.960643][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 466.108025][T18921] nbd1: detected capacity change from 0 to 127 [ 466.143653][T18921] ipvlan2: entered allmulticast mode [ 466.154490][T18921] syz_tun: entered allmulticast mode [ 466.257324][T18930] batman_adv: batadv0: Adding interface: dummy0 [ 466.269559][T18930] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.299076][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.305251][T18930] batman_adv: batadv0: Interface activated: dummy0 [ 466.311416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.323599][ T5845] block nbd1: Receive control failed (result -104) [ 466.354139][T18931] batadv0: mtu less than device minimum [ 466.362158][T18931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.374634][T18931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.386513][T18931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.398376][T18931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.410211][T18931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.583870][T18935] __nla_validate_parse: 2 callbacks suppressed [ 466.583896][T18935] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3117'. [ 466.655586][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3117'. [ 466.743120][T18943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3120'. [ 466.798452][T18947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3120'. [ 466.843041][T18943] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.850543][T18943] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.940354][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.947589][T18947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.956224][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.963500][T18947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.057879][T18947] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3120'. [ 467.086061][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.093478][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.293859][T18974] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3127'. [ 467.310879][T18976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3127'. [ 467.709141][T18991] netlink: 'syz.2.3131': attribute type 11 has an invalid length. [ 467.745915][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 467.801097][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3131'. [ 468.205673][T19009] syzkaller1: entered promiscuous mode [ 468.226173][T19009] syzkaller1: entered allmulticast mode [ 468.244295][T19011] rdma_rxe: rxe_newlink: failed to add gre0 [ 468.392612][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'. [ 469.077779][ T29] audit: type=1800 audit(1776238513.816:12): pid=19062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3151" name="memory.events" dev="tmpfs" ino=342 res=0 errno=0 [ 469.086793][T19062] bridge_slave_1: left allmulticast mode [ 469.104933][T19062] bridge_slave_1: left promiscuous mode [ 469.110916][T19062] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.126461][T19062] bridge_slave_0: left allmulticast mode [ 469.154835][T19062] bridge_slave_0: left promiscuous mode [ 469.175136][T19062] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.418910][ T1689] block nbd1: Connection timed out, retrying (0/1 alive) [ 469.429314][ T1689] block nbd1: Connection timed out, retrying (0/1 alive) [ 469.436568][ T1689] block nbd1: Connection timed out, retrying (0/1 alive) [ 469.444598][ T1689] block nbd1: Connection timed out, retrying (0/1 alive) [ 469.452526][ T1689] block nbd1: Dead connection, failed to find a fallback [ 469.462017][ T1689] block nbd1: shutting down sockets [ 469.468833][ T1689] blk_print_req_error: 138 callbacks suppressed [ 469.468854][ T1689] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.487055][ T1689] buffer_io_error: 138 callbacks suppressed [ 469.487076][ T1689] Buffer I/O error on dev nbd1, logical block 3, async page read [ 469.502564][ T1689] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.512377][ T1689] Buffer I/O error on dev nbd1, logical block 2, async page read [ 469.520396][ T1689] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.531600][ T1689] Buffer I/O error on dev nbd1, logical block 1, async page read [ 469.540240][ T1689] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.549988][ T1689] Buffer I/O error on dev nbd1, logical block 0, async page read [ 469.564167][T18317] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.592041][T18317] Buffer I/O error on dev nbd1, logical block 0, async page read [ 469.615279][T18317] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.648831][T18317] Buffer I/O error on dev nbd1, logical block 1, async page read [ 469.667182][T18317] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.696564][T18317] Buffer I/O error on dev nbd1, logical block 2, async page read [ 469.799324][T18317] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.856637][T18317] Buffer I/O error on dev nbd1, logical block 3, async page read [ 469.908160][T18317] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.929438][T18317] Buffer I/O error on dev nbd1, logical block 0, async page read [ 469.948791][T18317] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.007200][T18317] Buffer I/O error on dev nbd1, logical block 1, async page read [ 470.019299][T18317] ldm_validate_partition_table(): Disk read failed. [ 470.026657][T18317] Dev nbd1: unable to read RDB block 0 [ 470.078608][T18317] nbd1: unable to read partition table [ 470.093169][T18317] ldm_validate_partition_table(): Disk read failed. [ 470.101598][T18317] Dev nbd1: unable to read RDB block 0 [ 470.109909][T18317] nbd1: unable to read partition table [ 470.450086][ T9] net_ratelimit: 20 callbacks suppressed [ 470.450111][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.506157][T19105] bond2: option primary_reselect: invalid value (4) [ 470.520837][T19110] atomic_op ffff888059bbb198 conn xmit_atomic 0000000000000000 [ 470.525346][T19113] netlink: 'syz.6.3167': attribute type 1 has an invalid length. [ 470.544015][T19105] bond2 (unregistering): Released all slaves [ 470.967691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.975866][ C0] lec:lec_tx_timeout: lec0 [ 470.981887][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.163956][T19136] ip6gre1: entered promiscuous mode [ 471.180596][T19136] ip6gre1: entered allmulticast mode [ 471.547986][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.952795][T19163] ±ÿ speed is unknown, defaulting to 1000 [ 472.214136][T19179] netlink: 'syz.6.3184': attribute type 1 has an invalid length. [ 472.237537][T19180] netlink: 'syz.6.3184': attribute type 1 has an invalid length. [ 472.369730][ T9991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.389546][T19179] bond1: entered promiscuous mode [ 472.403114][T19179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.612954][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.671706][T19206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.680885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.741305][T19206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.754744][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.816575][T19206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.825818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.866802][T19198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.091249][T19229] netlink: 'syz.2.3194': attribute type 39 has an invalid length. [ 473.151375][T19230] __nla_validate_parse: 12 callbacks suppressed [ 473.151399][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3193'. [ 473.433515][T19226] dummy0: left promiscuous mode [ 473.487430][T19198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.512518][T19215] ±ÿ speed is unknown, defaulting to 1000 [ 473.681106][T19198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.912348][T19251] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.920425][T19251] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.403585][T19251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.424285][T19251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.640201][ T6613] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.640682][T19259] delete_channel: no stack [ 475.655949][ T6613] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.678944][ T6590] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.778922][T19198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.836294][ T6590] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.875978][T19270] vlan2: entered promiscuous mode [ 475.889577][T19270] bond0: entered promiscuous mode [ 475.899801][T19270] bond_slave_0: entered promiscuous mode [ 475.905757][T19270] bond_slave_1: entered promiscuous mode [ 475.928369][ T9957] net_ratelimit: 4 callbacks suppressed [ 475.928393][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.998172][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 476.006526][ C0] lec:lec_tx_timeout: lec0 [ 476.012249][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.282041][ T9582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.324038][T19278] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3206'. [ 476.338609][T19278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3206'. [ 476.349860][T19282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3208'. [ 476.378018][T19278] netlink: 'syz.2.3206': attribute type 62 has an invalid length. [ 476.401059][ T6601] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.410113][ T6601] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.460989][ T6601] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.708037][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3211'. [ 476.885824][T19309] syzkaller1: entered promiscuous mode [ 476.911913][T19309] syzkaller1: entered allmulticast mode [ 476.958507][T19309] 8021q: VLANs not supported on vxcan0 [ 477.011690][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.063066][T19324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3218'. [ 477.190953][T19326] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3219'. [ 477.232555][T19326] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 477.285240][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 477.592485][T19345] pimreg: entered allmulticast mode [ 477.618081][T19345] pimreg: left allmulticast mode [ 477.898500][T19349] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 478.048427][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.420021][T19377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3233'. [ 478.450405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.469439][T19377] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 479.004730][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3235'. [ 479.091010][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.851526][T19394] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 480.128630][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.950925][T19358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.027702][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.035784][ C0] lec:lec_tx_timeout: lec0 [ 481.040830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 481.168827][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.216530][T19406] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 481.390264][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 481.438163][T19421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3246'. [ 481.489024][ T9992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.512152][T19429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.521436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.533422][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3247'. [ 481.786960][T19421] macsec1: entered promiscuous mode [ 481.858040][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 482.170273][T19454] lo speed is unknown, defaulting to 1000 [ 482.182025][T19455] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20002 [ 482.193032][T19454] lo speed is unknown, defaulting to 1000 [ 482.204613][T19451] netlink: 'syz.1.3254': attribute type 4 has an invalid length. [ 482.218507][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.227815][T19454] lo speed is unknown, defaulting to 1000 [ 482.245788][T19451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.563908][T19454] infiniband syz0: set down [ 482.569712][T19454] infiniband syz0: added lo [ 482.603830][ T24] lo speed is unknown, defaulting to 1000 [ 482.627422][T19454] RDS/IB: syz0: added [ 482.631820][T19454] smc: adding ib device syz0 with port count 1 [ 482.639379][T19454] smc: ib device syz0 port 1 has no pnetid [ 482.662600][ T24] lo speed is unknown, defaulting to 1000 [ 482.709185][T19454] lo speed is unknown, defaulting to 1000 [ 483.249025][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.280560][T19479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3263'. [ 483.443747][T19454] lo speed is unknown, defaulting to 1000 [ 483.557245][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3267'. [ 483.568400][ T9992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.597970][T19488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3267'. [ 483.918469][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3270'. [ 484.039148][T19507] netlink: 'syz.2.3271': attribute type 10 has an invalid length. [ 484.047209][T19507] batman_adv: batadv0: Interface deactivated: dummy0 [ 484.086801][T19507] batman_adv: batadv0: Removing interface: dummy0 [ 484.109513][T19507] team0: Port device dummy0 added [ 484.148632][T19514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.195110][T19514] netlink: 'syz.4.3274': attribute type 10 has an invalid length. [ 484.227048][T19514] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 484.237790][T19515] veth0: entered promiscuous mode [ 484.256531][T19515] bond0: entered promiscuous mode [ 484.261896][T19515] bond_slave_0: entered promiscuous mode [ 484.267899][T19515] bond_slave_1: entered promiscuous mode [ 484.288474][T19454] lo speed is unknown, defaulting to 1000 [ 484.387482][T19514] netlink: 'syz.4.3274': attribute type 39 has an invalid length. [ 484.442380][T19519] netlink: 'syz.5.3275': attribute type 1 has an invalid length. [ 484.774432][T19505] bond0: left promiscuous mode [ 484.779477][T19505] bond_slave_0: left promiscuous mode [ 484.796129][T19505] bond_slave_1: left promiscuous mode [ 484.806545][T19505] veth0: left promiscuous mode [ 484.935402][T19454] lo speed is unknown, defaulting to 1000 [ 484.991472][T19533] netlink: 'syz.2.3279': attribute type 1 has an invalid length. [ 485.109418][T19537] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 485.212634][T19542] bond1: (slave bridge0): making interface the new active one [ 485.222036][T19542] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 485.365569][T19546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3284'. [ 485.478352][T19553] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3285'. [ 485.580403][T19454] lo speed is unknown, defaulting to 1000 [ 486.047968][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.056166][ C0] lec:lec_tx_timeout: lec0 [ 486.061273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.193275][T19454] lo speed is unknown, defaulting to 1000 [ 486.251693][T19584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3294'. [ 486.307627][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 486.346293][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 486.368809][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 486.505043][T19593] bond2: option lacp_active: invalid value (8) [ 486.564961][T19593] bond2 (unregistering): Released all slaves [ 486.608425][T19601] xt_socket: unknown flags 0x50 [ 486.804558][T19454] lo speed is unknown, defaulting to 1000 [ 487.107606][T19623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3305'. [ 487.498991][T19454] lo speed is unknown, defaulting to 1000 [ 487.510907][T19631] "syz.2.3308" (19631) uses obsolete ecb(arc4) skcipher [ 487.755673][T19647] netlink: 'syz.5.3311': attribute type 1 has an invalid length. [ 487.870733][T19647] bond12: entered promiscuous mode [ 487.876092][T19647] bond12: entered allmulticast mode [ 487.909056][T19647] 8021q: adding VLAN 0 to HW filter on device bond12 [ 487.925799][T19652] gretap0: entered promiscuous mode [ 487.964557][T19653] erspan2: entered allmulticast mode [ 488.000753][T19653] bond12: (slave erspan2): making interface the new active one [ 488.029559][T19653] erspan2: entered promiscuous mode [ 488.039520][T19653] bond12: (slave erspan2): Enslaving as an active interface with an up link [ 488.355886][T19664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.384306][T19664] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.407277][T19664] net_ratelimit: 6 callbacks suppressed [ 488.407290][T19664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.430633][ T24] lo speed is unknown, defaulting to 1000 [ 488.458457][ T24] syz0: Port: 1 Link ACTIVE [ 488.463767][ T9952] lo speed is unknown, defaulting to 1000 [ 488.961371][T19700] ±ÿ speed is unknown, defaulting to 1000 [ 489.178368][T19714] __nla_validate_parse: 21 callbacks suppressed [ 489.178390][T19714] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3327'. [ 489.369604][T19717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.380891][T19717] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.396787][T19717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.516885][T19724] Bluetooth: MGMT ver 1.23 [ 489.530452][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3329'. [ 489.730589][T19729] tipc: Enabled bearer , priority 10 [ 489.761730][T19700] lo speed is unknown, defaulting to 1000 [ 490.020084][T19731] dummy0: entered promiscuous mode [ 490.026256][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 490.035531][T19731] dummy0: left promiscuous mode [ 490.105380][T19736] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 490.124131][T19736] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 490.178828][T19741] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 490.197566][T19741] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 490.539678][T19757] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3338'. [ 490.611328][ T9992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.005873][T19773] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 491.005873][T19773] Please contact the netfilter-devel mailing list or update your nftables rules. [ 491.067933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 491.076008][ C0] lec:lec_tx_timeout: lec0 [ 491.080961][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 491.153913][T19777] ±ÿ speed is unknown, defaulting to 1000 [ 491.200779][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3343'. [ 491.393938][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3350'. [ 491.412077][T19787] IPVS: Scheduler module ip_vs_ not found [ 491.553966][T19795] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 491.577541][T19795] bond2 (unregistering): Released all slaves [ 491.612069][T19800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3351'. [ 491.897422][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.906622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.104088][T19777] lo speed is unknown, defaulting to 1000 [ 492.500841][T19809] syzkaller0: entered promiscuous mode [ 492.506745][T19809] syzkaller0: entered allmulticast mode [ 492.909739][T19828] netlink: 'syz.2.3358': attribute type 39 has an invalid length. [ 495.089334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.410965][T19850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3363'. [ 495.682476][T19860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.693585][T19860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.718301][T19860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.728467][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.736791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.778542][T19862] netlink: 51 bytes leftover after parsing attributes in process `syz.6.3368'. [ 495.812606][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3369'. [ 495.912474][T19862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.924225][T19861] delete_channel: no stack [ 495.939044][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.967928][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.003752][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 496.012842][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 496.022754][T19874] netlink: 'syz.2.3372': attribute type 14 has an invalid length. [ 496.039657][T19874] netlink: 'syz.2.3372': attribute type 12 has an invalid length. [ 496.087687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 496.095973][ C0] lec:lec_tx_timeout: lec0 [ 496.100647][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 496.169645][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 496.180861][ T6613] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.190119][ T6613] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.218001][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 496.245085][T19874] netlink: 'syz.2.3372': attribute type 14 has an invalid length. [ 496.271115][T19874] netlink: 'syz.2.3372': attribute type 12 has an invalid length. [ 496.281595][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.290162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.325013][ T6613] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.334916][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 496.346760][ T6590] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.697149][T19900] veth0_to_bridge: entered promiscuous mode [ 496.727491][T19898] veth0_to_bridge: left promiscuous mode [ 496.935329][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 497.032108][T19911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3383'. [ 497.265990][T19925] FAULT_INJECTION: forcing a failure. [ 497.265990][T19925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.309017][T19925] CPU: 1 UID: 0 PID: 19925 Comm: syz.1.3388 Not tainted syzkaller #0 PREEMPT(full) [ 497.309050][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.309064][T19925] Call Trace: [ 497.309073][T19925] [ 497.309082][T19925] dump_stack_lvl+0xe8/0x150 [ 497.309124][T19925] should_fail_ex+0x412/0x560 [ 497.309166][T19925] _copy_to_user+0x31/0xb0 [ 497.309195][T19925] simple_read_from_buffer+0xe1/0x170 [ 497.309228][T19925] proc_fail_nth_read+0x1bb/0x230 [ 497.309259][T19925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.309289][T19925] ? rw_verify_area+0x2a6/0x4d0 [ 497.309308][T19925] ? tun_chr_write_iter+0x18a/0x200 [ 497.309457][T19925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.309486][T19925] vfs_read+0x20c/0xa70 [ 497.309505][T19925] ? fdget_pos+0x246/0x320 [ 497.309527][T19925] ? __pfx___mutex_lock+0x10/0x10 [ 497.309553][T19925] ? __pfx_vfs_read+0x10/0x10 [ 497.309574][T19925] ? __fget_files+0x2a/0x420 [ 497.309594][T19925] ? __fget_files+0x3a0/0x420 [ 497.309609][T19925] ? __fget_files+0x2a/0x420 [ 497.309633][T19925] ksys_read+0x150/0x270 [ 497.309654][T19925] ? __pfx_ksys_read+0x10/0x10 [ 497.309685][T19925] do_syscall_64+0x14d/0xf80 [ 497.309706][T19925] ? trace_irq_disable+0x3b/0x150 [ 497.309723][T19925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.309742][T19925] ? clear_bhb_loop+0x40/0x90 [ 497.309764][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.309782][T19925] RIP: 0033:0x7f897b95d04e [ 497.309799][T19925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.309815][T19925] RSP: 002b:00007f897c8a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.309834][T19925] RAX: ffffffffffffffda RBX: 00007f897c8a26c0 RCX: 00007f897b95d04e [ 497.309847][T19925] RDX: 000000000000000f RSI: 00007f897c8a20a0 RDI: 0000000000000006 [ 497.309859][T19925] RBP: 00007f897c8a2090 R08: 0000000000000000 R09: 0000000000000000 [ 497.309870][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.309880][T19925] R13: 00007f897bc16038 R14: 00007f897bc15fa0 R15: 00007ffd496a5798 [ 497.309909][T19925] [ 497.553126][T19927] netlink: 'syz.6.3389': attribute type 10 has an invalid length. [ 497.620937][T19928] netlink: 'syz.6.3389': attribute type 10 has an invalid length. [ 497.672062][T19927] team0: Port device dummy0 added [ 497.791313][T19928] team0: Port device dummy0 removed [ 497.822493][T19928] dummy0: entered promiscuous mode [ 497.839298][T19928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 497.851627][T19935] 8021q: VLANs not supported on ip6_vti0 [ 498.463960][T19972] netlink: 'syz.6.3402': attribute type 13 has an invalid length. [ 498.678489][T19986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 500.217975][ T24] net_ratelimit: 7 callbacks suppressed [ 500.217997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.349438][T20049] netlink: 'syz.5.3420': attribute type 13 has an invalid length. [ 500.367921][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 500.376040][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 500.436203][T20049] gretap0: refused to change device tx_queue_len [ 500.489005][T20049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 500.659574][T20063] tipc: Started in network mode [ 500.674774][T20063] tipc: Node identity ac14140f, cluster identity 4711 [ 500.718032][T20063] tipc: New replicast peer: 255.255.255.255 [ 500.724871][T20063] tipc: Enabled bearer , priority 3 [ 500.739525][ T6583] [ 500.741921][ T6583] ============================================ [ 500.748103][ T6583] WARNING: possible recursive locking detected [ 500.754300][ T6583] syzkaller #0 Not tainted [ 500.758750][ T6583] -------------------------------------------- [ 500.764934][ T6583] kworker/u8:13/6583 is trying to acquire lock: [ 500.771201][ T6583] ffff88807b45c958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 500.781182][ T6583] [ 500.781182][ T6583] but task is already holding lock: [ 500.788571][ T6583] ffff888031932958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 500.798465][ T6583] [ 500.798465][ T6583] other info that might help us debug this: [ 500.806545][ T6583] Possible unsafe locking scenario: [ 500.806545][ T6583] [ 500.814018][ T6583] CPU0 [ 500.817684][ T6583] ---- [ 500.820982][ T6583] lock(&qdisc_xmit_lock_key#3); [ 500.826040][ T6583] lock(&qdisc_xmit_lock_key#3); [ 500.831631][ T6583] [ 500.831631][ T6583] *** DEADLOCK *** [ 500.831631][ T6583] [ 500.839795][ T6583] May be due to missing lock nesting notation [ 500.839795][ T6583] [ 500.848130][ T6583] 10 locks held by kworker/u8:13/6583: [ 500.853613][ T6583] #0: ffff888035bb2148 ((wq_completion)bond12){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 500.864728][ T6583] #1: ffffc9000cd1fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 500.877746][ T6583] #2: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 500.887489][ T6583] #3: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 500.897515][ T6583] #4: ffff88805923a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3980 [ 500.910247][ T6583] #5: ffff888031932958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 500.920556][ T6583] #6: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 500.929575][ T6583] #7: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 500.939373][ T6583] #8: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 500.949414][ T6583] #9: ffff88804e13e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3980 [ 500.962084][ T6583] [ 500.962084][ T6583] stack backtrace: [ 500.968015][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 500.968040][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.968055][ T6583] Workqueue: bond12 bond_alb_monitor [ 500.968087][ T6583] Call Trace: [ 500.968094][ T6583] [ 500.968102][ T6583] dump_stack_lvl+0xe8/0x150 [ 500.968133][ T6583] print_deadlock_bug+0x279/0x290 [ 500.968199][ T6583] __lock_acquire+0x253f/0x2cf0 [ 500.968239][ T6583] ? unwind_next_frame+0xa5/0x23c0 [ 500.968278][ T6583] ? unwind_next_frame+0x1aaf/0x23c0 [ 500.968307][ T6583] ? validate_xmit_skb+0xc5f/0x14a0 [ 500.968327][ T6583] lock_acquire+0xf0/0x2e0 [ 500.968348][ T6583] ? sch_direct_xmit+0x15f/0x4c0 [ 500.968376][ T6583] _raw_spin_lock+0x2e/0x40 [ 500.968439][ T6583] ? sch_direct_xmit+0x15f/0x4c0 [ 500.968461][ T6583] sch_direct_xmit+0x15f/0x4c0 [ 500.968485][ T6583] ? __pfx_sch_direct_xmit+0x10/0x10 [ 500.968512][ T6583] __dev_queue_xmit+0x180f/0x3980 [ 500.968533][ T6583] ? __dev_queue_xmit+0x2b6/0x3980 [ 500.968557][ T6583] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.968575][ T6583] ? neigh_resolve_output+0x438/0x750 [ 500.968626][ T6583] ? eth_header+0x11b/0x200 [ 500.968641][ T6583] ? __asan_memcpy+0x40/0x70 [ 500.968672][ T6583] ? ip_finish_output2+0x3c2/0x1070 [ 500.968689][ T6583] ip_finish_output2+0xca9/0x1070 [ 500.968706][ T6583] ? ip_skb_dst_mtu+0x80b/0xa50 [ 500.968725][ T6583] ? ip_finish_output+0x40e/0x530 [ 500.968753][ T6583] ip_output+0x29f/0x450 [ 500.968779][ T6583] ? ip_output+0x5b/0x450 [ 500.968805][ T6583] iptunnel_xmit+0x621/0xd10 [ 500.968874][ T6583] ip_tunnel_xmit+0x193a/0x1f20 [ 500.969031][ T6583] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 500.969059][ T6583] ? __pfx_gre_build_header+0x10/0x10 [ 500.969111][ T6583] ? kfree+0x1c1/0x630 [ 500.969127][ T6583] ? pskb_expand_head+0x460/0x1270 [ 500.969167][ T6583] __gre_xmit+0x19e/0x240 [ 500.969191][ T6583] ? __pfx___gre_xmit+0x10/0x10 [ 500.969225][ T6583] erspan_xmit+0xa41/0x14d0 [ 500.969269][ T6583] ? __lock_acquire+0x6b5/0x2cf0 [ 500.969294][ T6583] ? ret_from_fork_asm+0x1a/0x30 [ 500.969322][ T6583] ? __pfx_erspan_xmit+0x10/0x10 [ 500.969345][ T6583] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.969374][ T6583] dev_hard_start_xmit+0x2d8/0x870 [ 500.969399][ T6583] sch_direct_xmit+0x251/0x4c0 [ 500.969424][ T6583] ? __pfx_sch_direct_xmit+0x10/0x10 [ 500.969445][ T6583] ? kthread+0x2a0/0x470 [ 500.969470][ T6583] __dev_queue_xmit+0x180f/0x3980 [ 500.969491][ T6583] ? __dev_queue_xmit+0x2b6/0x3980 [ 500.969515][ T6583] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.969533][ T6583] ? rcu_is_watching+0x15/0xb0 [ 500.969558][ T6583] ? trace_kmem_cache_alloc+0x29/0xf0 [ 500.969577][ T6583] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 500.969603][ T6583] ? alb_send_lp_vid+0x14e/0x550 [ 500.969630][ T6583] alb_send_lp_vid+0x348/0x550 [ 500.969658][ T6583] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 500.969681][ T6583] ? __lock_acquire+0x6b5/0x2cf0 [ 500.969711][ T6583] alb_send_learning_packets+0x12c/0x300 [ 500.969735][ T6583] ? register_lock_class+0x31/0x2e0 [ 500.969758][ T6583] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 500.969787][ T6583] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 500.969833][ T6583] bond_alb_monitor+0x3d5/0x17e0 [ 500.969859][ T6583] ? bond_alb_monitor+0xf8/0x17e0 [ 500.969883][ T6583] ? __pfx_bond_alb_monitor+0x10/0x10 [ 500.969908][ T6583] ? process_scheduled_works+0xa8d/0x18c0 [ 500.969930][ T6583] ? process_scheduled_works+0xa8d/0x18c0 [ 500.969953][ T6583] process_scheduled_works+0xb6e/0x18c0 [ 500.969990][ T6583] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.970016][ T6583] ? assign_work+0x3d5/0x5e0 [ 500.970039][ T6583] worker_thread+0xa53/0xfc0 [ 500.970076][ T6583] kthread+0x388/0x470 [ 500.970092][ T6583] ? __pfx_worker_thread+0x10/0x10 [ 500.970114][ T6583] ? __pfx_kthread+0x10/0x10 [ 500.970131][ T6583] ret_from_fork+0x51e/0xb90 [ 500.970156][ T6583] ? __pfx_ret_from_fork+0x10/0x10 [ 500.970178][ T6583] ? __switch_to+0xc7d/0x1450 [ 500.970216][ T6583] ? __pfx_kthread+0x10/0x10 [ 500.970233][ T6583] ret_from_fork_asm+0x1a/0x30 [ 500.970267][ T6583] [ 500.998745][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.507898][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.837893][ T9968] tipc: Node number set to 2886997007 [ 501.887690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 501.895749][ C0] lec:lec_tx_timeout: lec0 [ 501.900479][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 505.978102][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.986427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.938271][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 506.946392][ C0] lec:lec_tx_timeout: lec0 [ 506.951064][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 509.808351][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.816720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog